General

  • Target

    f19cb81fef89e8147062d1f77252deb3460a9f69cc390d278a65779c4abceab9

  • Size

    331KB

  • Sample

    241025-h5g8daxenn

  • MD5

    e7ed771bac45ff82de1d3fbe3a9264f9

  • SHA1

    2d8aa3cfa2c558134aae66f79f8da6ad65e07d8f

  • SHA256

    f19cb81fef89e8147062d1f77252deb3460a9f69cc390d278a65779c4abceab9

  • SHA512

    cb59920498886b7a22aa584510445832a5d5e1591f23427d0573b4b3acaa99784d9d0c151d139669acd1bfb960403b37ded75699d2a801a575a2cac5caadfbeb

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVA:vHW138/iXWlK885rKlGSekcj66ciEA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      f19cb81fef89e8147062d1f77252deb3460a9f69cc390d278a65779c4abceab9

    • Size

      331KB

    • MD5

      e7ed771bac45ff82de1d3fbe3a9264f9

    • SHA1

      2d8aa3cfa2c558134aae66f79f8da6ad65e07d8f

    • SHA256

      f19cb81fef89e8147062d1f77252deb3460a9f69cc390d278a65779c4abceab9

    • SHA512

      cb59920498886b7a22aa584510445832a5d5e1591f23427d0573b4b3acaa99784d9d0c151d139669acd1bfb960403b37ded75699d2a801a575a2cac5caadfbeb

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVA:vHW138/iXWlK885rKlGSekcj66ciEA

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks