General

  • Target

    92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7

  • Size

    324KB

  • Sample

    240728-b17txa1anr

  • MD5

    af4a0a3252e92465547ee37416213f72

  • SHA1

    4818e4540da9d7f10156192a6f0139ed8b1bdf0c

  • SHA256

    92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7

  • SHA512

    5ca773ae23ebdbeafd2e5e926e919d0d52451d77b93fb48a690f565603e0fc3ca7a44276296e1140b90dada664bc2a1004d511447d27464d37a558bb069e863e

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYv:vHW138/iXWlK885rKlGSekcj66cim

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7

    • Size

      324KB

    • MD5

      af4a0a3252e92465547ee37416213f72

    • SHA1

      4818e4540da9d7f10156192a6f0139ed8b1bdf0c

    • SHA256

      92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7

    • SHA512

      5ca773ae23ebdbeafd2e5e926e919d0d52451d77b93fb48a690f565603e0fc3ca7a44276296e1140b90dada664bc2a1004d511447d27464d37a558bb069e863e

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYv:vHW138/iXWlK885rKlGSekcj66cim

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks