General

  • Target

    369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9

  • Size

    59KB

  • Sample

    240806-zat25azcnl

  • MD5

    43b98f2f84c84e705ad1b49cec1af4bf

  • SHA1

    537ea069aea32c6330db395bf02bfae1911388e9

  • SHA256

    369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9

  • SHA512

    9c97e22c116b82237e7bbfe085ed8a4ce7262d4de762740309647b9d8be67ce3e68ee3f01b9aab6d56d39c57aa44b861d9b2432bc875328159d804d069f56638

  • SSDEEP

    1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4PelN:GVpYPx3S2K3ks3ff3p40N

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9

    • Size

      59KB

    • MD5

      43b98f2f84c84e705ad1b49cec1af4bf

    • SHA1

      537ea069aea32c6330db395bf02bfae1911388e9

    • SHA256

      369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9

    • SHA512

      9c97e22c116b82237e7bbfe085ed8a4ce7262d4de762740309647b9d8be67ce3e68ee3f01b9aab6d56d39c57aa44b861d9b2432bc875328159d804d069f56638

    • SSDEEP

      1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4PelN:GVpYPx3S2K3ks3ff3p40N

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks