General

  • Target

    e4383a9d9f98c96bfbdfa966427330cbca14915bdd147269405d8328d7199b85N

  • Size

    95KB

  • Sample

    241020-h8lpzawcqh

  • MD5

    2c7d85175faab0aa95c0313c34704c20

  • SHA1

    994b70640e5c099cc3edbdd8e8206515c1e7523e

  • SHA256

    e4383a9d9f98c96bfbdfa966427330cbca14915bdd147269405d8328d7199b85

  • SHA512

    4e5983fad91a804d717e267856244e7db6b26483769e26508d0e95c5d720231c73d09c629e3693caaec16c40017aace1890f40a1bab17d087493845c25259aa4

  • SSDEEP

    1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cR4:nqV9MziU4piRun7C3CP3MT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      e4383a9d9f98c96bfbdfa966427330cbca14915bdd147269405d8328d7199b85N

    • Size

      95KB

    • MD5

      2c7d85175faab0aa95c0313c34704c20

    • SHA1

      994b70640e5c099cc3edbdd8e8206515c1e7523e

    • SHA256

      e4383a9d9f98c96bfbdfa966427330cbca14915bdd147269405d8328d7199b85

    • SHA512

      4e5983fad91a804d717e267856244e7db6b26483769e26508d0e95c5d720231c73d09c629e3693caaec16c40017aace1890f40a1bab17d087493845c25259aa4

    • SSDEEP

      1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cR4:nqV9MziU4piRun7C3CP3MT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks