General

  • Target

    ab4044f4810ffe851981d6e5d2e9ee27b03bfd166e20c7a5cd74e454021dd5ecN

  • Size

    136KB

  • Sample

    241021-appnhsyerg

  • MD5

    da2fe9969f2ba1d2773b88a6bb854b00

  • SHA1

    5029bb792b60d969a5a6e75e8edd002c0bbbc9f1

  • SHA256

    ab4044f4810ffe851981d6e5d2e9ee27b03bfd166e20c7a5cd74e454021dd5ec

  • SHA512

    bb74bb5f98dbf0e0e6848b7e4319434507fd5e3475e52df9a4e1cb681951400af651d2d198a9dafe599a678e7c067a41269ea4b3230f75a93e2fa5e1d9eca95f

  • SSDEEP

    1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIh:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4h

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ab4044f4810ffe851981d6e5d2e9ee27b03bfd166e20c7a5cd74e454021dd5ecN

    • Size

      136KB

    • MD5

      da2fe9969f2ba1d2773b88a6bb854b00

    • SHA1

      5029bb792b60d969a5a6e75e8edd002c0bbbc9f1

    • SHA256

      ab4044f4810ffe851981d6e5d2e9ee27b03bfd166e20c7a5cd74e454021dd5ec

    • SHA512

      bb74bb5f98dbf0e0e6848b7e4319434507fd5e3475e52df9a4e1cb681951400af651d2d198a9dafe599a678e7c067a41269ea4b3230f75a93e2fa5e1d9eca95f

    • SSDEEP

      1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfIh:P/5kqCxiXEcO3XfGf2tMUf6odgR5A4h

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks