General

  • Target

    82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aaN

  • Size

    272KB

  • Sample

    241026-e5f4jaxmbj

  • MD5

    ac8bf2e5d6913198ca725bcadd2850b0

  • SHA1

    85e654d8996ff42801f7236d9a9491cc511898ba

  • SHA256

    82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aa

  • SHA512

    2b2874be2bc2250d7978a583e458066d78aff12d1162ecad998852a8f3c4352e0406f3fac730e275a141c7593dbac802ec6e271e6e7b6fc6ddb37f6d34513e7a

  • SSDEEP

    3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0e:pOzRWu27dlOd5W0r

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aaN

    • Size

      272KB

    • MD5

      ac8bf2e5d6913198ca725bcadd2850b0

    • SHA1

      85e654d8996ff42801f7236d9a9491cc511898ba

    • SHA256

      82ec056d7dd56179f06d3681c2b342a385d860b1885a1800f71e11be6d8653aa

    • SHA512

      2b2874be2bc2250d7978a583e458066d78aff12d1162ecad998852a8f3c4352e0406f3fac730e275a141c7593dbac802ec6e271e6e7b6fc6ddb37f6d34513e7a

    • SSDEEP

      3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0e:pOzRWu27dlOd5W0r

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks