General

  • Target

    de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9

  • Size

    58KB

  • Sample

    240802-gj25zstfrb

  • MD5

    340cd4f521887337aed9d61f0c1f5298

  • SHA1

    bca6f0dba1eaa25469b2930d3d1c1f1c096bb792

  • SHA256

    de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9

  • SHA512

    b830edd3601613a7469c9b3e205d591fb0abf8e0695aa0b1329ce84e3ebb08e994e3520cca10116c33420bfffbbd9e56f4d6f4b6b40db6c2c544a19a6caa8de5

  • SSDEEP

    1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8d:6n25DbaMySmJAhbvoutd

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9

    • Size

      58KB

    • MD5

      340cd4f521887337aed9d61f0c1f5298

    • SHA1

      bca6f0dba1eaa25469b2930d3d1c1f1c096bb792

    • SHA256

      de1ea3a7dbf8ee7805bb71b03360a5a8ed4a1246e09a6de27759d97d2f6673e9

    • SHA512

      b830edd3601613a7469c9b3e205d591fb0abf8e0695aa0b1329ce84e3ebb08e994e3520cca10116c33420bfffbbd9e56f4d6f4b6b40db6c2c544a19a6caa8de5

    • SSDEEP

      1536:6W82C0Db1edMckBI1kmJAhTPY6pnouy8d:6n25DbaMySmJAhbvoutd

    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks