General

  • Target

    1e94e50379eb79df4ba74b986fb068212aa01b6690853bb4f81caff9b4481eb4N

  • Size

    264KB

  • Sample

    241026-rf6dcavekc

  • MD5

    fdd2e2e06e9fc96e91974ae2b6fe32b0

  • SHA1

    c7fc4ebd41bdcc3e3aeb001275103e25a567ec4c

  • SHA256

    1e94e50379eb79df4ba74b986fb068212aa01b6690853bb4f81caff9b4481eb4

  • SHA512

    2598cd6437bc741a2947cc5318bab50b22606fa23bfc4cdf402539658c7d76d33184ac935ddd36f8221ad3e0107389394782e202d1b06fe49cb7074d827f5b21

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaH:ASeyGpTaesaQUufkL57YsL9NIx9ANaH

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      1e94e50379eb79df4ba74b986fb068212aa01b6690853bb4f81caff9b4481eb4N

    • Size

      264KB

    • MD5

      fdd2e2e06e9fc96e91974ae2b6fe32b0

    • SHA1

      c7fc4ebd41bdcc3e3aeb001275103e25a567ec4c

    • SHA256

      1e94e50379eb79df4ba74b986fb068212aa01b6690853bb4f81caff9b4481eb4

    • SHA512

      2598cd6437bc741a2947cc5318bab50b22606fa23bfc4cdf402539658c7d76d33184ac935ddd36f8221ad3e0107389394782e202d1b06fe49cb7074d827f5b21

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaH:ASeyGpTaesaQUufkL57YsL9NIx9ANaH

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks