General

  • Target

    2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312N

  • Size

    334KB

  • Sample

    241010-f2pryaybph

  • MD5

    6f471b8db93a1994595c281472a55e90

  • SHA1

    60f86b330ef4961e3465cd70cc6e7edfeaa04217

  • SHA256

    2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312

  • SHA512

    737a5f50f26e542b0c8926364576e048679cff821e8489b7f47ed8dad40a96390b6e7bb049591bda5be8033bd53493469379e968c1d990ed5e960f52a078bbd1

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312N

    • Size

      334KB

    • MD5

      6f471b8db93a1994595c281472a55e90

    • SHA1

      60f86b330ef4961e3465cd70cc6e7edfeaa04217

    • SHA256

      2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312

    • SHA512

      737a5f50f26e542b0c8926364576e048679cff821e8489b7f47ed8dad40a96390b6e7bb049591bda5be8033bd53493469379e968c1d990ed5e960f52a078bbd1

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks