General

  • Target

    c77aeea261d0a8e74c504686a6a1d535e7c108d4e2977aa1fd0f9062f57d7ef6N

  • Size

    92KB

  • Sample

    241023-h3kwgsxeje

  • MD5

    e2b2434ebfe885a473b7a5bb1d1b2940

  • SHA1

    a88c4fb2ccf7a528983f860094dde2c30051b200

  • SHA256

    c77aeea261d0a8e74c504686a6a1d535e7c108d4e2977aa1fd0f9062f57d7ef6

  • SHA512

    ab1cb1729bf4ebdc35fe1c2688a991191272044acf98489acac787987284f5e6354f2f1a8dba94e4114481cfce02fe3947db50968c7e4e9ad4c22dcd017c9f97

  • SSDEEP

    768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEpR:heZqP25TuIfmS7Fv1aUZSD9yiIHrR

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      c77aeea261d0a8e74c504686a6a1d535e7c108d4e2977aa1fd0f9062f57d7ef6N

    • Size

      92KB

    • MD5

      e2b2434ebfe885a473b7a5bb1d1b2940

    • SHA1

      a88c4fb2ccf7a528983f860094dde2c30051b200

    • SHA256

      c77aeea261d0a8e74c504686a6a1d535e7c108d4e2977aa1fd0f9062f57d7ef6

    • SHA512

      ab1cb1729bf4ebdc35fe1c2688a991191272044acf98489acac787987284f5e6354f2f1a8dba94e4114481cfce02fe3947db50968c7e4e9ad4c22dcd017c9f97

    • SSDEEP

      768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEpR:heZqP25TuIfmS7Fv1aUZSD9yiIHrR

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks