General

  • Target

    c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30N

  • Size

    475KB

  • Sample

    241021-hnp7natdrb

  • MD5

    500a01c76e42e2772ec258609109c4c0

  • SHA1

    13488794a902f65780dbf320cedbd44050425685

  • SHA256

    c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30

  • SHA512

    6f48c34d604e140ccb1e2aba16771f2d40dc02e6bda7a1adf11c50600a589a27ef94cfe539ba7a2bd4bb4ec12c759ad584261979a7c8e77f4e124dad4b419261

  • SSDEEP

    12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mZD:9x9GzHlTv/b35tecFB6Y

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

Targets

    • Target

      c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30N

    • Size

      475KB

    • MD5

      500a01c76e42e2772ec258609109c4c0

    • SHA1

      13488794a902f65780dbf320cedbd44050425685

    • SHA256

      c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30

    • SHA512

      6f48c34d604e140ccb1e2aba16771f2d40dc02e6bda7a1adf11c50600a589a27ef94cfe539ba7a2bd4bb4ec12c759ad584261979a7c8e77f4e124dad4b419261

    • SSDEEP

      12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mZD:9x9GzHlTv/b35tecFB6Y

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks