General

  • Target

    0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN

  • Size

    330KB

  • Sample

    241026-h7vw9a1gqb

  • MD5

    bb675c9e0bf8090c602b8e63a5fc8d30

  • SHA1

    b16746c27c1769d8107b0809646ceee2b6a1b779

  • SHA256

    0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269c

  • SHA512

    3185f510b80251fd4fe3baf81a4d42a7db84f77454118bf4d6ae872dec2cdea2b80f0ddbd54a54a83ed91e7d88becec374c36723156381355e9a919b7e011ef9

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVZ:vHW138/iXWlK885rKlGSekcj66ciEZ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN

    • Size

      330KB

    • MD5

      bb675c9e0bf8090c602b8e63a5fc8d30

    • SHA1

      b16746c27c1769d8107b0809646ceee2b6a1b779

    • SHA256

      0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269c

    • SHA512

      3185f510b80251fd4fe3baf81a4d42a7db84f77454118bf4d6ae872dec2cdea2b80f0ddbd54a54a83ed91e7d88becec374c36723156381355e9a919b7e011ef9

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVZ:vHW138/iXWlK885rKlGSekcj66ciEZ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks