General

  • Target

    a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e

  • Size

    57KB

  • Sample

    241026-bnyepsydnr

  • MD5

    2650580371c8440f32cdc5bdd9c79063

  • SHA1

    ca0db46389229205aa02074d4e2fb891ba985452

  • SHA256

    a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e

  • SHA512

    8939abd188726bfd230b62afa5ac24f7bc8bcabd5c2a97d3234819fae4c66067e8a9fa1fd4e373364d816f46c37305d5ca5f1f899c55878f3351eed4c78cac6a

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl12:amZ+luXwy2f9LDhD2

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e

    • Size

      57KB

    • MD5

      2650580371c8440f32cdc5bdd9c79063

    • SHA1

      ca0db46389229205aa02074d4e2fb891ba985452

    • SHA256

      a74cf49a83473e2508e72e43e4c125c58fe90e7f97aa2388c8288af387eb892e

    • SHA512

      8939abd188726bfd230b62afa5ac24f7bc8bcabd5c2a97d3234819fae4c66067e8a9fa1fd4e373364d816f46c37305d5ca5f1f899c55878f3351eed4c78cac6a

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl12:amZ+luXwy2f9LDhD2

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks