General

  • Target

    c273d07536ba6f540a72c0f1211f0b18247cc7906024b5e1781a361169a22b69N

  • Size

    330KB

  • Sample

    241006-m4tx1avdpa

  • MD5

    fd5ddc24809aedb5a832a550837ff2d0

  • SHA1

    3c3aab16fe6a56598712dac34158d59703244fee

  • SHA256

    c273d07536ba6f540a72c0f1211f0b18247cc7906024b5e1781a361169a22b69

  • SHA512

    32a4db760cac195819a7ae43678efb2cbf0ca9732429c68ec40c0d70173591aa7c0a53a500d107e2692b30916945d61fc34caa7ad0e91e49183cc3b87658b44c

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVf:vHW138/iXWlK885rKlGSekcj66ciEf

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      c273d07536ba6f540a72c0f1211f0b18247cc7906024b5e1781a361169a22b69N

    • Size

      330KB

    • MD5

      fd5ddc24809aedb5a832a550837ff2d0

    • SHA1

      3c3aab16fe6a56598712dac34158d59703244fee

    • SHA256

      c273d07536ba6f540a72c0f1211f0b18247cc7906024b5e1781a361169a22b69

    • SHA512

      32a4db760cac195819a7ae43678efb2cbf0ca9732429c68ec40c0d70173591aa7c0a53a500d107e2692b30916945d61fc34caa7ad0e91e49183cc3b87658b44c

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVf:vHW138/iXWlK885rKlGSekcj66ciEf

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks