General

  • Target

    220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38N

  • Size

    333KB

  • Sample

    241010-xgv7nawfrn

  • MD5

    c23847d035bab660215d50477c0b7b10

  • SHA1

    935a125cbc515bfef83fb303ee0d52c696348117

  • SHA256

    220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38

  • SHA512

    b9828c60e6615b9840768709acbdde6c2007800b467eb093f4b296931eb2279c80c281326be21411d471b641f27537039712cf1e53be18865df10177141d0720

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYJ:vHW138/iXWlK885rKlGSekcj66ciM

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38N

    • Size

      333KB

    • MD5

      c23847d035bab660215d50477c0b7b10

    • SHA1

      935a125cbc515bfef83fb303ee0d52c696348117

    • SHA256

      220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38

    • SHA512

      b9828c60e6615b9840768709acbdde6c2007800b467eb093f4b296931eb2279c80c281326be21411d471b641f27537039712cf1e53be18865df10177141d0720

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYJ:vHW138/iXWlK885rKlGSekcj66ciM

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks