General

  • Target

    e9763cc17ddcb2bd0f2e1b4cc93c4cadfed966ae1b32d5625858f8e0dd96643fN

  • Size

    326KB

  • Sample

    241023-klb85asfkn

  • MD5

    619fb029d0feba1851055bfd609ef240

  • SHA1

    8ce238174560d95fa03bd60425085481502ae29c

  • SHA256

    e9763cc17ddcb2bd0f2e1b4cc93c4cadfed966ae1b32d5625858f8e0dd96643f

  • SHA512

    66ccdfc58b3751fbadee6ad3da5879a3db6b9fc9c4a7c1dcacd48327db43c02b05d0950b5a70e89a0bdb5050adce236a8a8bdb66a2f8ef9aeb067e28840ff3f8

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYW:vHW138/iXWlK885rKlGSekcj66ciz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      e9763cc17ddcb2bd0f2e1b4cc93c4cadfed966ae1b32d5625858f8e0dd96643fN

    • Size

      326KB

    • MD5

      619fb029d0feba1851055bfd609ef240

    • SHA1

      8ce238174560d95fa03bd60425085481502ae29c

    • SHA256

      e9763cc17ddcb2bd0f2e1b4cc93c4cadfed966ae1b32d5625858f8e0dd96643f

    • SHA512

      66ccdfc58b3751fbadee6ad3da5879a3db6b9fc9c4a7c1dcacd48327db43c02b05d0950b5a70e89a0bdb5050adce236a8a8bdb66a2f8ef9aeb067e28840ff3f8

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYW:vHW138/iXWlK885rKlGSekcj66ciz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks