General

  • Target

    033e8929d659f887634d806f1c5e1c0395dde54068ca35df69ab2b0db491ebd6N

  • Size

    60KB

  • Sample

    241002-bqz2baterb

  • MD5

    d6a7907dab1f4a9f29ccbf821bf8f4e0

  • SHA1

    925556045f03dd5e8272fc50f9583c496b1e10ee

  • SHA256

    033e8929d659f887634d806f1c5e1c0395dde54068ca35df69ab2b0db491ebd6

  • SHA512

    6c531aec2dcda2074f0ae0b99ce9972cf6955f4db06a9c643a3445c789564c3e26a8fb30c40ae78a9cb1bd21927f329b016cad31987f701372f0a3993548b29a

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      033e8929d659f887634d806f1c5e1c0395dde54068ca35df69ab2b0db491ebd6N

    • Size

      60KB

    • MD5

      d6a7907dab1f4a9f29ccbf821bf8f4e0

    • SHA1

      925556045f03dd5e8272fc50f9583c496b1e10ee

    • SHA256

      033e8929d659f887634d806f1c5e1c0395dde54068ca35df69ab2b0db491ebd6

    • SHA512

      6c531aec2dcda2074f0ae0b99ce9972cf6955f4db06a9c643a3445c789564c3e26a8fb30c40ae78a9cb1bd21927f329b016cad31987f701372f0a3993548b29a

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks