General

  • Target

    71ca76e53b3cf6b0d0645516599f6866.zip

  • Size

    254KB

  • Sample

    240901-xcskzazamh

  • MD5

    08947c0ca1bc021a9d69df3b76ff54b1

  • SHA1

    aa51e8d7436c62516d808f74fddec441c32b4e4e

  • SHA256

    c1e416b5ef92bb83151b2033bb85771ab1ff9d6538c774bffd2da862c250dc9e

  • SHA512

    d8544209c90c5f09196e398714fb211da899e9f4b3a4752bca861562574d625f315b0bfdba8cf78c91bedc5b65bc76d6a0f6603405b3b5c62fd8d0342705771f

  • SSDEEP

    6144:P4N6MsToVKIv5HFu3bZf0VsDzd835WU2N3VB978fqd8Cl:Pq5hHFu1iGdHtVL78fWv

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      a56f581e5702649e6e049130a90f9beb954acc90fc5d060366cf4de35b493914

    • Size

      597KB

    • MD5

      71ca76e53b3cf6b0d0645516599f6866

    • SHA1

      e3469fb09232a1d59693ac4dda46205567d51410

    • SHA256

      a56f581e5702649e6e049130a90f9beb954acc90fc5d060366cf4de35b493914

    • SHA512

      d9e45182d9107cfbd9b1046e755e1719e914ee3c9840657626950a70cbf410f142c41512cec10c31d02bcc2000d9aff1403ff4945f0eece89917b6f5197794cd

    • SSDEEP

      6144:KzU7blKaPcbhj+bB7ktZeRnVDJm0oNjOPdInpBH:MU7MLb4BQkntwNjqd2

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks