General

  • Target

    65b414c1c1863a3072f98073547f242a72a9ed8054cbc541b3d1aa9cd62ef73a

  • Size

    325KB

  • Sample

    241025-alb81syfqc

  • MD5

    611d6a65f8841ddb7355514cdcbd6a14

  • SHA1

    c2ce66d4ebc4c36bc278a9e04271a8bfddf87b5f

  • SHA256

    65b414c1c1863a3072f98073547f242a72a9ed8054cbc541b3d1aa9cd62ef73a

  • SHA512

    65c977a632349164d671572f7c8218cff3fde056fc608b2d13d3b47044b13d4a00d47d0abe9a9b50ae6f9fe915859fa83895a38dd46effcfbc5693fa58138b3e

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciR

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      65b414c1c1863a3072f98073547f242a72a9ed8054cbc541b3d1aa9cd62ef73a

    • Size

      325KB

    • MD5

      611d6a65f8841ddb7355514cdcbd6a14

    • SHA1

      c2ce66d4ebc4c36bc278a9e04271a8bfddf87b5f

    • SHA256

      65b414c1c1863a3072f98073547f242a72a9ed8054cbc541b3d1aa9cd62ef73a

    • SHA512

      65c977a632349164d671572f7c8218cff3fde056fc608b2d13d3b47044b13d4a00d47d0abe9a9b50ae6f9fe915859fa83895a38dd46effcfbc5693fa58138b3e

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciR

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks