General

  • Target

    daced677dcc79beb0dfb2c2551d990e035b10923da1b76747d6e15f17362df07

  • Size

    326KB

  • Sample

    241022-ealqjaxcjq

  • MD5

    0dbc7805da2c9c5c454e4bc6b32a3144

  • SHA1

    bfd7db98c902492000b95a05b920bf95bdba2442

  • SHA256

    daced677dcc79beb0dfb2c2551d990e035b10923da1b76747d6e15f17362df07

  • SHA512

    9aa615f8e2a2bdd34815a73ec1f5ce268b6cc71d89b49c60a1d755eae74f7d983ea96b8e1561e0cfba155be84c6c54692688b2e4d58409f271111540b9346d02

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYh:vHW138/iXWlK885rKlGSekcj66cik

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      daced677dcc79beb0dfb2c2551d990e035b10923da1b76747d6e15f17362df07

    • Size

      326KB

    • MD5

      0dbc7805da2c9c5c454e4bc6b32a3144

    • SHA1

      bfd7db98c902492000b95a05b920bf95bdba2442

    • SHA256

      daced677dcc79beb0dfb2c2551d990e035b10923da1b76747d6e15f17362df07

    • SHA512

      9aa615f8e2a2bdd34815a73ec1f5ce268b6cc71d89b49c60a1d755eae74f7d983ea96b8e1561e0cfba155be84c6c54692688b2e4d58409f271111540b9346d02

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYh:vHW138/iXWlK885rKlGSekcj66cik

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks