General

  • Target

    8412e6f180b663036d47b798cbf9c8ddd91e44b2f85db49eb3b969c7d17a3c70N

  • Size

    96KB

  • Sample

    241022-jc2a8atgjh

  • MD5

    d5e7467b715aa9fda9885911ac96d3b0

  • SHA1

    a37dc9048388df643bd273024aee7d27eec816e2

  • SHA256

    8412e6f180b663036d47b798cbf9c8ddd91e44b2f85db49eb3b969c7d17a3c70

  • SHA512

    9deafef6ebd71cc7cd2c0a92844319abf4b0f7e2cf93989df37617b309bc6de1bad97355ae990ecd27f2f17c027d4da9bf656ea089dc67dab8ee0dc8b7a3f145

  • SSDEEP

    1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cRGY:nqV9MziU4piRun7C3CP3MxY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      8412e6f180b663036d47b798cbf9c8ddd91e44b2f85db49eb3b969c7d17a3c70N

    • Size

      96KB

    • MD5

      d5e7467b715aa9fda9885911ac96d3b0

    • SHA1

      a37dc9048388df643bd273024aee7d27eec816e2

    • SHA256

      8412e6f180b663036d47b798cbf9c8ddd91e44b2f85db49eb3b969c7d17a3c70

    • SHA512

      9deafef6ebd71cc7cd2c0a92844319abf4b0f7e2cf93989df37617b309bc6de1bad97355ae990ecd27f2f17c027d4da9bf656ea089dc67dab8ee0dc8b7a3f145

    • SSDEEP

      1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cRGY:nqV9MziU4piRun7C3CP3MxY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks