General

  • Target

    c577ed02f78724ddbd157cd8b3f33356e96c9604131f82eb6e70e8e4829a8395

  • Size

    57KB

  • Sample

    241017-bl765atgkb

  • MD5

    4a0e2566a380025f1b880265a989ddc1

  • SHA1

    a836af84c19d1a5febbb17d369d1708eaf1070f3

  • SHA256

    c577ed02f78724ddbd157cd8b3f33356e96c9604131f82eb6e70e8e4829a8395

  • SHA512

    7190fb370d0c7e9ffe7f14b9fdf2106a0af92592d2e1b2b8aebd1b094bde31e3d6f85150fbae978cf5c379cc9d3a8dfe7348d218a4705e9965be6a10429d27b2

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Z:MOemdTd1o74qlmbbJ+x+Ikn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      c577ed02f78724ddbd157cd8b3f33356e96c9604131f82eb6e70e8e4829a8395

    • Size

      57KB

    • MD5

      4a0e2566a380025f1b880265a989ddc1

    • SHA1

      a836af84c19d1a5febbb17d369d1708eaf1070f3

    • SHA256

      c577ed02f78724ddbd157cd8b3f33356e96c9604131f82eb6e70e8e4829a8395

    • SHA512

      7190fb370d0c7e9ffe7f14b9fdf2106a0af92592d2e1b2b8aebd1b094bde31e3d6f85150fbae978cf5c379cc9d3a8dfe7348d218a4705e9965be6a10429d27b2

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Z:MOemdTd1o74qlmbbJ+x+Ikn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks