General

  • Target

    4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dcN

  • Size

    507KB

  • Sample

    241023-vv6t7s1frb

  • MD5

    afabaa8dda0ceafe8d9720b24b70d2e0

  • SHA1

    2f6bb162073bccc539ba8d65715d0fcb1f269600

  • SHA256

    4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dc

  • SHA512

    5f6adcac905f842235be8435a6d359c763d8c1d5274825dc86d3d213bb39af1a89f72772f0051f16b31da9c1a07c11d4d18f741254652e7aa063f76689c7102c

  • SSDEEP

    12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoM:3MUv2LAv9AQ1p4dKt

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dcN

    • Size

      507KB

    • MD5

      afabaa8dda0ceafe8d9720b24b70d2e0

    • SHA1

      2f6bb162073bccc539ba8d65715d0fcb1f269600

    • SHA256

      4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dc

    • SHA512

      5f6adcac905f842235be8435a6d359c763d8c1d5274825dc86d3d213bb39af1a89f72772f0051f16b31da9c1a07c11d4d18f741254652e7aa063f76689c7102c

    • SSDEEP

      12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoM:3MUv2LAv9AQ1p4dKt

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks