General

  • Target

    67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616

  • Size

    402KB

  • Sample

    241025-2hxjbswaph

  • MD5

    795df109157cb3019f46be982a65d77d

  • SHA1

    78a49ed0afcf9ce48f164ca6f47f0d79b76aa1f1

  • SHA256

    67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616

  • SHA512

    5e0fa3f69d9ef541071d2ed3adfb9ff2117a5bdf4a970409f2b97db4a1a5152b5ddb3e69f274bb30635eff341c16004c699ef576ec76cb681427ff44c297eb7c

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBroh3:8IfBoDWoyFblU6hAJQnON

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616

    • Size

      402KB

    • MD5

      795df109157cb3019f46be982a65d77d

    • SHA1

      78a49ed0afcf9ce48f164ca6f47f0d79b76aa1f1

    • SHA256

      67fbca0d1e899ec4b1148996488b1664b50601e4e452e98b41aa27a4e93a0616

    • SHA512

      5e0fa3f69d9ef541071d2ed3adfb9ff2117a5bdf4a970409f2b97db4a1a5152b5ddb3e69f274bb30635eff341c16004c699ef576ec76cb681427ff44c297eb7c

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBroh3:8IfBoDWoyFblU6hAJQnON

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks