General

  • Target

    4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a

  • Size

    62KB

  • Sample

    241027-2jxkqa1rdy

  • MD5

    9ba797f4c504c4c5851025279c7c42ae

  • SHA1

    e95f0da7df452c324db3b134769339498aa98b14

  • SHA256

    4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a

  • SHA512

    aada2a4c9e31b471635df9e82eee19108bde388b0dc763f5246adc276e04ba56254354514b64f793e6ebd534df8c0d37b0a6de873164758e7159badb7a61f930

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVNs:Jo0cAthu6+FQ0JuPkNs

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a

    • Size

      62KB

    • MD5

      9ba797f4c504c4c5851025279c7c42ae

    • SHA1

      e95f0da7df452c324db3b134769339498aa98b14

    • SHA256

      4570022758d877a4058b10e2d7472ada3fd1be7e6af479040e2e7a7219491f8a

    • SHA512

      aada2a4c9e31b471635df9e82eee19108bde388b0dc763f5246adc276e04ba56254354514b64f793e6ebd534df8c0d37b0a6de873164758e7159badb7a61f930

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVNs:Jo0cAthu6+FQ0JuPkNs

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks