General

  • Target

    4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75

  • Size

    356KB

  • Sample

    241028-2xwwcazbjj

  • MD5

    89280f71892759a8b5d330cbed1a6b9c

  • SHA1

    94fc6560599b5020fb558500a094394a5c85af8c

  • SHA256

    4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75

  • SHA512

    fed9aaf4e187023a341fbb4e785105b436d6f5d6501fa31b2841c87f65b06c37260dff6608671316783ad8dad84e620e190b87e0bfa686a821ad178d0ec03118

  • SSDEEP

    6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0h:MUyI6QmPPPqVsps

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75

    • Size

      356KB

    • MD5

      89280f71892759a8b5d330cbed1a6b9c

    • SHA1

      94fc6560599b5020fb558500a094394a5c85af8c

    • SHA256

      4dd9cbea45573b466fea7b19445ee3cf60b300f5297f788a7ea8b3730b498a75

    • SHA512

      fed9aaf4e187023a341fbb4e785105b436d6f5d6501fa31b2841c87f65b06c37260dff6608671316783ad8dad84e620e190b87e0bfa686a821ad178d0ec03118

    • SSDEEP

      6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0h:MUyI6QmPPPqVsps

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks