General

  • Target

    b440a7a1c9d401772ac35bc1ac4f2fa34f28aeed3620ad3c50df20fa9f9663dbN

  • Size

    331KB

  • Sample

    241022-1c3bysvfjf

  • MD5

    7de543d0f3b6dbefe54897024b1607e0

  • SHA1

    79975c050849faa747a67c2c47612dad009780c4

  • SHA256

    b440a7a1c9d401772ac35bc1ac4f2fa34f28aeed3620ad3c50df20fa9f9663db

  • SHA512

    943ad0817c275b7037413136907108543c519e6bd1d10dfa49667408c8597aaa78bef30f232ca54b30bff2dc3f88b861aa44a819a7574c6aa6608ec3a0cb8aba

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      b440a7a1c9d401772ac35bc1ac4f2fa34f28aeed3620ad3c50df20fa9f9663dbN

    • Size

      331KB

    • MD5

      7de543d0f3b6dbefe54897024b1607e0

    • SHA1

      79975c050849faa747a67c2c47612dad009780c4

    • SHA256

      b440a7a1c9d401772ac35bc1ac4f2fa34f28aeed3620ad3c50df20fa9f9663db

    • SHA512

      943ad0817c275b7037413136907108543c519e6bd1d10dfa49667408c8597aaa78bef30f232ca54b30bff2dc3f88b861aa44a819a7574c6aa6608ec3a0cb8aba

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciB

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks