General

  • Target

    b47487a890b3ca66c95b7602105c230d0b78f4b2ea88f651de136e5869299217

  • Size

    325KB

  • Sample

    241025-ez5jyavfmn

  • MD5

    1ac972ef0744dbef4ae6ab6458c7db27

  • SHA1

    5052cb948e325d158802300ca0121659383d525f

  • SHA256

    b47487a890b3ca66c95b7602105c230d0b78f4b2ea88f651de136e5869299217

  • SHA512

    90c009bdb0a1d6efdef9df59b7610657f5861ea34022dfd3600352e223fca846c3f7afeb174a63b305bb8d8de51bf6d2746dde4f22a0211024fb2bf07be035f0

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciF

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      b47487a890b3ca66c95b7602105c230d0b78f4b2ea88f651de136e5869299217

    • Size

      325KB

    • MD5

      1ac972ef0744dbef4ae6ab6458c7db27

    • SHA1

      5052cb948e325d158802300ca0121659383d525f

    • SHA256

      b47487a890b3ca66c95b7602105c230d0b78f4b2ea88f651de136e5869299217

    • SHA512

      90c009bdb0a1d6efdef9df59b7610657f5861ea34022dfd3600352e223fca846c3f7afeb174a63b305bb8d8de51bf6d2746dde4f22a0211024fb2bf07be035f0

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciF

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks