General

  • Target

    48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a

  • Size

    330KB

  • Sample

    241024-zagf2atbnh

  • MD5

    9ee173d4110145b3764c7d169e194410

  • SHA1

    0ec6ed51e5c6cfdd09fdb41d2701fa045d505627

  • SHA256

    48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a

  • SHA512

    601b14814a16a77c77163a4317a3028b7fe25b96afb9fcffc55d8998c8522d54c76d7fa4104a17faaaa4c49c7eae00c295c554a31f1feb78bef972e1247a174e

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5w:vHW138/iXWlK885rKlGSekcj66ci3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a

    • Size

      330KB

    • MD5

      9ee173d4110145b3764c7d169e194410

    • SHA1

      0ec6ed51e5c6cfdd09fdb41d2701fa045d505627

    • SHA256

      48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a

    • SHA512

      601b14814a16a77c77163a4317a3028b7fe25b96afb9fcffc55d8998c8522d54c76d7fa4104a17faaaa4c49c7eae00c295c554a31f1feb78bef972e1247a174e

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5w:vHW138/iXWlK885rKlGSekcj66ci3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks