General

  • Target

    e81df4b45caf68c9600fab81448e58af0f865c2f1a93041cdf64456b71e9c1fcN

  • Size

    331KB

  • Sample

    241009-zpx3bsyara

  • MD5

    f7638637147d914bef040f29ce043ba0

  • SHA1

    4c5fb183775bdfae3cb40955242cc7c57f471774

  • SHA256

    e81df4b45caf68c9600fab81448e58af0f865c2f1a93041cdf64456b71e9c1fc

  • SHA512

    38b4032a74b0c107a8509525e7b090770604282fde7047e9cf612c5877d94a1d7a777a23b336f18a2af7435d861e82a4518f48b53071b1c9d5767a55c8b7a4bd

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVC:vHW138/iXWlK885rKlGSekcj66ciEC

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      e81df4b45caf68c9600fab81448e58af0f865c2f1a93041cdf64456b71e9c1fcN

    • Size

      331KB

    • MD5

      f7638637147d914bef040f29ce043ba0

    • SHA1

      4c5fb183775bdfae3cb40955242cc7c57f471774

    • SHA256

      e81df4b45caf68c9600fab81448e58af0f865c2f1a93041cdf64456b71e9c1fc

    • SHA512

      38b4032a74b0c107a8509525e7b090770604282fde7047e9cf612c5877d94a1d7a777a23b336f18a2af7435d861e82a4518f48b53071b1c9d5767a55c8b7a4bd

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVC:vHW138/iXWlK885rKlGSekcj66ciEC

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks