General

  • Target

    00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b

  • Size

    331KB

  • Sample

    241024-wn6raszenk

  • MD5

    d1dcec10e5a8a95bfcdbce9d385b083e

  • SHA1

    cc234341afaf794975cbc276beafb97481d4a1a0

  • SHA256

    00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b

  • SHA512

    38187716a365b278db7a03a64c786be595ddd2dacb4eeac0162a0ea2c86b47191513fd5db4e96fdbc8251156822cd1c299155cfe11122993ccdd5924207e2475

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVi:vHW138/iXWlK885rKlGSekcj66ciEi

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b

    • Size

      331KB

    • MD5

      d1dcec10e5a8a95bfcdbce9d385b083e

    • SHA1

      cc234341afaf794975cbc276beafb97481d4a1a0

    • SHA256

      00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b

    • SHA512

      38187716a365b278db7a03a64c786be595ddd2dacb4eeac0162a0ea2c86b47191513fd5db4e96fdbc8251156822cd1c299155cfe11122993ccdd5924207e2475

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVi:vHW138/iXWlK885rKlGSekcj66ciEi

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks