General

  • Target

    4849ca728f1013bc537edcd17d0e4d7faad27a6daa092215deb112d3f64ac76e

  • Size

    59KB

  • Sample

    240803-1gmr3azhpb

  • MD5

    2972466528dc7161bb7984207bcb1e48

  • SHA1

    6c8d03e3dd5ce5d355bcd5c55b411c0cf4ccadff

  • SHA256

    4849ca728f1013bc537edcd17d0e4d7faad27a6daa092215deb112d3f64ac76e

  • SHA512

    ef7431f6952895cecd8e90672a4072ba46b4d16865cb837eb59ad15c746d64dc19bbaa005c695eaeb3cad15acb92b6638821daa2f58651fdd9ec7a02670494a6

  • SSDEEP

    1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel9L:GVpYPx3S2K3ks3ff3p409L

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      4849ca728f1013bc537edcd17d0e4d7faad27a6daa092215deb112d3f64ac76e

    • Size

      59KB

    • MD5

      2972466528dc7161bb7984207bcb1e48

    • SHA1

      6c8d03e3dd5ce5d355bcd5c55b411c0cf4ccadff

    • SHA256

      4849ca728f1013bc537edcd17d0e4d7faad27a6daa092215deb112d3f64ac76e

    • SHA512

      ef7431f6952895cecd8e90672a4072ba46b4d16865cb837eb59ad15c746d64dc19bbaa005c695eaeb3cad15acb92b6638821daa2f58651fdd9ec7a02670494a6

    • SSDEEP

      1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel9L:GVpYPx3S2K3ks3ff3p409L

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks