General

  • Target

    e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bfN

  • Size

    65KB

  • Sample

    241027-chs4gazpg1

  • MD5

    bdfc6bfdef7c5435f691359d7eaa0860

  • SHA1

    1a8dc8142fc1b2b7cba8a9502dc1203b2d9b20da

  • SHA256

    e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bf

  • SHA512

    c515bd3a6e375a47f5a23a6d8dd6ccf378420a06797692c7a8eb54f8350c2ebc93ff069afee7b9c59fe67fdcbd13bbdf46d0131472125c09974cf4f30e803a8d

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD07yg:6bQRSHpAvzyf7MzeThD07yg

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bfN

    • Size

      65KB

    • MD5

      bdfc6bfdef7c5435f691359d7eaa0860

    • SHA1

      1a8dc8142fc1b2b7cba8a9502dc1203b2d9b20da

    • SHA256

      e40ac6982d1a3acb94f7bcf8fd221465cd799bb3ced7944d328fdf30778b23bf

    • SHA512

      c515bd3a6e375a47f5a23a6d8dd6ccf378420a06797692c7a8eb54f8350c2ebc93ff069afee7b9c59fe67fdcbd13bbdf46d0131472125c09974cf4f30e803a8d

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD07yg:6bQRSHpAvzyf7MzeThD07yg

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks