General

  • Target

    b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130

  • Size

    56KB

  • Sample

    240723-cgb4ka1eqc

  • MD5

    6bc6d3ef3a45c337462b692271b09cce

  • SHA1

    17d474c1246cce14805e53ed25d9105aaa4bae20

  • SHA256

    b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130

  • SHA512

    a52fa030193233ea0a1c30d0432dd826ac8987df27abe0c3e9db9309d095723052c6d74711f09e776abb8d6a6002e4f60765aac1377eb3b622698f5b92be1cad

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8lR:MOemdTd1o74qlmbbJ+x+IkfR

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130

    • Size

      56KB

    • MD5

      6bc6d3ef3a45c337462b692271b09cce

    • SHA1

      17d474c1246cce14805e53ed25d9105aaa4bae20

    • SHA256

      b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130

    • SHA512

      a52fa030193233ea0a1c30d0432dd826ac8987df27abe0c3e9db9309d095723052c6d74711f09e776abb8d6a6002e4f60765aac1377eb3b622698f5b92be1cad

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8lR:MOemdTd1o74qlmbbJ+x+IkfR

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks