General

  • Target

    4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff

  • Size

    64KB

  • Sample

    240804-1cm72awhkr

  • MD5

    ac414a4a49be6f98206b0c9dc1712079

  • SHA1

    c4ba3165d0eba121f6cbc682a03f117238e73ca0

  • SHA256

    4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff

  • SHA512

    c24b79bf61b7768526182d391af5ab57b552629ffead0bc172d541effd874d3e8c266492dcdfc28604be44a0ecfd03c553a91a15c6887f53c3479a7302fb62f9

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0:6bQRSHpAvzyf7MzeThD0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff

    • Size

      64KB

    • MD5

      ac414a4a49be6f98206b0c9dc1712079

    • SHA1

      c4ba3165d0eba121f6cbc682a03f117238e73ca0

    • SHA256

      4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff

    • SHA512

      c24b79bf61b7768526182d391af5ab57b552629ffead0bc172d541effd874d3e8c266492dcdfc28604be44a0ecfd03c553a91a15c6887f53c3479a7302fb62f9

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0:6bQRSHpAvzyf7MzeThD0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks