General

  • Target

    0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244

  • Size

    467KB

  • Sample

    241026-w7tk3svnem

  • MD5

    056c01f212d27f84ae5d05b8265587a8

  • SHA1

    9337c21393f733f49b6ebdbd206bc587a26e235b

  • SHA256

    0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244

  • SHA512

    e376f507171f36c9f842196b875ed85661f1dabe0e8ef76d1d99e286e9a22a94f83503b98485a95441ecdc0173e8f8134ecfbd48513a6fe97617c18da8e24de5

  • SSDEEP

    12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mw:9x9GzHlTv/b35tecFB61

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

Targets

    • Target

      0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244

    • Size

      467KB

    • MD5

      056c01f212d27f84ae5d05b8265587a8

    • SHA1

      9337c21393f733f49b6ebdbd206bc587a26e235b

    • SHA256

      0e4b5515dcc549de7fbc86b0449d4644e5ee01b53406753e17feaea77b562244

    • SHA512

      e376f507171f36c9f842196b875ed85661f1dabe0e8ef76d1d99e286e9a22a94f83503b98485a95441ecdc0173e8f8134ecfbd48513a6fe97617c18da8e24de5

    • SSDEEP

      12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mw:9x9GzHlTv/b35tecFB61

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks