General

  • Target

    8fe4515d44b72e96a26bcf148ffeb52311de418255bc3e6c635e71c791d2fec5N

  • Size

    403KB

  • Sample

    241025-saeh4symaw

  • MD5

    c769bee14908ab982b432883968b83e0

  • SHA1

    c49f0b736847fa69ccc308f61ed6d5e65f6e128b

  • SHA256

    8fe4515d44b72e96a26bcf148ffeb52311de418255bc3e6c635e71c791d2fec5

  • SHA512

    90151e14f65afe3c9471a812591b9fd61f0cf3387ddcc2755ef9d59309c6529978e5001daad9ffbc65559eb3ca420123f5716b1b0a2897056f9876a72a88db44

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohl:8IfBoDWoyFblU6hAJQnOz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      8fe4515d44b72e96a26bcf148ffeb52311de418255bc3e6c635e71c791d2fec5N

    • Size

      403KB

    • MD5

      c769bee14908ab982b432883968b83e0

    • SHA1

      c49f0b736847fa69ccc308f61ed6d5e65f6e128b

    • SHA256

      8fe4515d44b72e96a26bcf148ffeb52311de418255bc3e6c635e71c791d2fec5

    • SHA512

      90151e14f65afe3c9471a812591b9fd61f0cf3387ddcc2755ef9d59309c6529978e5001daad9ffbc65559eb3ca420123f5716b1b0a2897056f9876a72a88db44

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohl:8IfBoDWoyFblU6hAJQnOz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks