General

  • Target

    3748c7ea0e4765471e62df2e29264e69f065352da0c1a5c2c54e6e1ed075bbd1N

  • Size

    57KB

  • Sample

    241026-jgb7ws1hpd

  • MD5

    a0d508a7afeef3455a78211f17100300

  • SHA1

    751bfdd0da6e8876dfc02d447828ffeaa20e6d00

  • SHA256

    3748c7ea0e4765471e62df2e29264e69f065352da0c1a5c2c54e6e1ed075bbd1

  • SHA512

    02d2dabe0a64d6442104b40edf11814bbc98a68d9a05abe9384a095e97de9b8b263d23a259fb990b5677c3a18bf7018094bec3ee7182f223fc6a816d81e2648f

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lH:amZ+luXwy2f9LDhDlH

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3748c7ea0e4765471e62df2e29264e69f065352da0c1a5c2c54e6e1ed075bbd1N

    • Size

      57KB

    • MD5

      a0d508a7afeef3455a78211f17100300

    • SHA1

      751bfdd0da6e8876dfc02d447828ffeaa20e6d00

    • SHA256

      3748c7ea0e4765471e62df2e29264e69f065352da0c1a5c2c54e6e1ed075bbd1

    • SHA512

      02d2dabe0a64d6442104b40edf11814bbc98a68d9a05abe9384a095e97de9b8b263d23a259fb990b5677c3a18bf7018094bec3ee7182f223fc6a816d81e2648f

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1lH:amZ+luXwy2f9LDhDlH

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks