General

  • Target

    131bd10db59066f77c934973a9648518c03ac2eb8ac2b80310da5a0bf6ca70fc

  • Size

    59KB

  • Sample

    240806-xp7knaxdqj

  • MD5

    f151bb0528b2a8695acd6e0b19d9fb92

  • SHA1

    df36605d1f1b9bddb49ca103f75722c235578ecd

  • SHA256

    131bd10db59066f77c934973a9648518c03ac2eb8ac2b80310da5a0bf6ca70fc

  • SHA512

    fc1defa1b3e4c7d70db81ad3c07b9ae0ba8cd32a4cd89384a23f0239a589188a302d8beba94c20dc4c31f79cec8fa4c87f419b687509514e5eecdc8bc016b6fa

  • SSDEEP

    1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pelw:GVpYPx3S2K3ks3ff3p40w

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      131bd10db59066f77c934973a9648518c03ac2eb8ac2b80310da5a0bf6ca70fc

    • Size

      59KB

    • MD5

      f151bb0528b2a8695acd6e0b19d9fb92

    • SHA1

      df36605d1f1b9bddb49ca103f75722c235578ecd

    • SHA256

      131bd10db59066f77c934973a9648518c03ac2eb8ac2b80310da5a0bf6ca70fc

    • SHA512

      fc1defa1b3e4c7d70db81ad3c07b9ae0ba8cd32a4cd89384a23f0239a589188a302d8beba94c20dc4c31f79cec8fa4c87f419b687509514e5eecdc8bc016b6fa

    • SSDEEP

      1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pelw:GVpYPx3S2K3ks3ff3p40w

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks