General

  • Target

    cb8e383868c93d77b50ed278d0005ecfb3096027e9de747a0da13272ea8cf8eb

  • Size

    59KB

  • Sample

    240807-djkzxszakr

  • MD5

    8dd6839947bf22f3a504a56b7ab4fb08

  • SHA1

    2882f4131750939cb1f3825d6d951ba9868f0d7f

  • SHA256

    cb8e383868c93d77b50ed278d0005ecfb3096027e9de747a0da13272ea8cf8eb

  • SHA512

    f565b2a9908e6b15933d58e8857e38fc1336e755898d574f826a73837cf58e7d0c2f06ed7e24f29eb50447d0003fc4186d2d0d3dedbcaebb9473c98690863493

  • SSDEEP

    1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pelp:GVpYPx3S2K3ks3ff3p40p

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      cb8e383868c93d77b50ed278d0005ecfb3096027e9de747a0da13272ea8cf8eb

    • Size

      59KB

    • MD5

      8dd6839947bf22f3a504a56b7ab4fb08

    • SHA1

      2882f4131750939cb1f3825d6d951ba9868f0d7f

    • SHA256

      cb8e383868c93d77b50ed278d0005ecfb3096027e9de747a0da13272ea8cf8eb

    • SHA512

      f565b2a9908e6b15933d58e8857e38fc1336e755898d574f826a73837cf58e7d0c2f06ed7e24f29eb50447d0003fc4186d2d0d3dedbcaebb9473c98690863493

    • SSDEEP

      1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pelp:GVpYPx3S2K3ks3ff3p40p

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks