General

  • Target

    164f5b03734399d64f34751a7259ebde4cdbf9dacc9973babfdbe78b2ba54b67N

  • Size

    332KB

  • Sample

    241023-jdyaysyakd

  • MD5

    9a6c0b8d796d5513d35648f4242588f0

  • SHA1

    1969f38833bb1948bcc9a67c3137cc8cd0cf22b6

  • SHA256

    164f5b03734399d64f34751a7259ebde4cdbf9dacc9973babfdbe78b2ba54b67

  • SHA512

    fe7f6b5f5ccd8898781ab7450497c93869e9401b22c1bebb5b33546767f18bcd230b5e4c27afb8a605d1e3e6120a4cb4562e54c5ea303ae09c3a14d545101b69

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYy:vHW138/iXWlK885rKlGSekcj66ci/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      164f5b03734399d64f34751a7259ebde4cdbf9dacc9973babfdbe78b2ba54b67N

    • Size

      332KB

    • MD5

      9a6c0b8d796d5513d35648f4242588f0

    • SHA1

      1969f38833bb1948bcc9a67c3137cc8cd0cf22b6

    • SHA256

      164f5b03734399d64f34751a7259ebde4cdbf9dacc9973babfdbe78b2ba54b67

    • SHA512

      fe7f6b5f5ccd8898781ab7450497c93869e9401b22c1bebb5b33546767f18bcd230b5e4c27afb8a605d1e3e6120a4cb4562e54c5ea303ae09c3a14d545101b69

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYy:vHW138/iXWlK885rKlGSekcj66ci/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks