General

  • Target

    ee7ff496af02b0274e5e4cfde231ee8e13383c11a47336dbc56bee835bcf0fef

  • Size

    56KB

  • Sample

    240726-f23c2aydnp

  • MD5

    521ec4784de52002e9b073f08fabe039

  • SHA1

    1e9a1724c5b3dc6f692698ae17441bc82e3d3aff

  • SHA256

    ee7ff496af02b0274e5e4cfde231ee8e13383c11a47336dbc56bee835bcf0fef

  • SHA512

    b50faf7dc1057a0900265d6b50ac046246a88fa0cd1ebcad1289de6be8e6667c12906b130e7a7ab87b0045c8f23e2c5be9a303c5a187a9d5d2ca5e3089a5e3db

  • SSDEEP

    1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHB:vMhAe5Zs091KI+JYixw49Xjr8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ee7ff496af02b0274e5e4cfde231ee8e13383c11a47336dbc56bee835bcf0fef

    • Size

      56KB

    • MD5

      521ec4784de52002e9b073f08fabe039

    • SHA1

      1e9a1724c5b3dc6f692698ae17441bc82e3d3aff

    • SHA256

      ee7ff496af02b0274e5e4cfde231ee8e13383c11a47336dbc56bee835bcf0fef

    • SHA512

      b50faf7dc1057a0900265d6b50ac046246a88fa0cd1ebcad1289de6be8e6667c12906b130e7a7ab87b0045c8f23e2c5be9a303c5a187a9d5d2ca5e3089a5e3db

    • SSDEEP

      1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHB:vMhAe5Zs091KI+JYixw49Xjr8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks