General

  • Target

    fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de

  • Size

    324KB

  • Sample

    241027-dqagrs1mhw

  • MD5

    ccb3964dd622fcc600a569de60895175

  • SHA1

    ae99f1714cfe9c8811dbd0d6fa28d55189017d75

  • SHA256

    fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de

  • SHA512

    af877883057fee997f0da3f0cd229923ab221e6841b84062b5dadf08f42e4d00dd5a1de42a095d4bc51d9a3ecbd9041e952d55a8eb8e0d208fe5dfc563aaa35b

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYA:vHW138/iXWlK885rKlGSekcj66cil

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de

    • Size

      324KB

    • MD5

      ccb3964dd622fcc600a569de60895175

    • SHA1

      ae99f1714cfe9c8811dbd0d6fa28d55189017d75

    • SHA256

      fb581c355b684b49484e4792417cc298d5c194a36dea2b8c8a9e970ee54589de

    • SHA512

      af877883057fee997f0da3f0cd229923ab221e6841b84062b5dadf08f42e4d00dd5a1de42a095d4bc51d9a3ecbd9041e952d55a8eb8e0d208fe5dfc563aaa35b

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYA:vHW138/iXWlK885rKlGSekcj66cil

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks