General

  • Target

    22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4

  • Size

    330KB

  • Sample

    241023-xy7a9axgpn

  • MD5

    45d8b112d6bd44f7a878ba1cf39da188

  • SHA1

    3c0e6d3e5a486f372924217ce088ef2f5a93fdb4

  • SHA256

    22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4

  • SHA512

    efcf882bed1abd8ab5b6ce15d7a270c199f78d24c724ae3c70080eee83efe2d66cf2b7484c4d2395da819db11a0ad1d750fbecdbe1d85ab5bb7da431fc033ed6

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66ciZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4

    • Size

      330KB

    • MD5

      45d8b112d6bd44f7a878ba1cf39da188

    • SHA1

      3c0e6d3e5a486f372924217ce088ef2f5a93fdb4

    • SHA256

      22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4

    • SHA512

      efcf882bed1abd8ab5b6ce15d7a270c199f78d24c724ae3c70080eee83efe2d66cf2b7484c4d2395da819db11a0ad1d750fbecdbe1d85ab5bb7da431fc033ed6

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66ciZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks