General

  • Target

    bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e

  • Size

    330KB

  • Sample

    241023-d7sdxa1cmm

  • MD5

    0a876c26a87f190545fb112547a4ddc1

  • SHA1

    a8948fd4fe8c374a1f9a1df2a290965a708daf90

  • SHA256

    bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e

  • SHA512

    993182e1cdcbb3bb2c9d9b896b1b849cdaba936685e1c8fcf1f8c4f500133ba9fd04f437e14ce6a9ee6b893ba74c3af8eb1742142f690127dc81a91b89886326

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9:vHW138/iXWlK885rKlGSekcj66cik

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e

    • Size

      330KB

    • MD5

      0a876c26a87f190545fb112547a4ddc1

    • SHA1

      a8948fd4fe8c374a1f9a1df2a290965a708daf90

    • SHA256

      bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e

    • SHA512

      993182e1cdcbb3bb2c9d9b896b1b849cdaba936685e1c8fcf1f8c4f500133ba9fd04f437e14ce6a9ee6b893ba74c3af8eb1742142f690127dc81a91b89886326

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9:vHW138/iXWlK885rKlGSekcj66cik

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks