General

  • Target

    5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893

  • Size

    331KB

  • Sample

    241028-3l5vjsxpht

  • MD5

    2f0ef1635939f533b6748635655ec64a

  • SHA1

    d11dea3716c70cc1d3958280a4b5093670fe4a87

  • SHA256

    5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893

  • SHA512

    cb3d74d99dd0c5a2599ee836a1155ae7485483e6a4f5ebdab90e1f2dad917da66187ce2a9190659e7e9f18f4b6063d1d09f0e1f49aacbd5fa1329b081e05e0e6

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVn:vHW138/iXWlK885rKlGSekcj66ciEn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893

    • Size

      331KB

    • MD5

      2f0ef1635939f533b6748635655ec64a

    • SHA1

      d11dea3716c70cc1d3958280a4b5093670fe4a87

    • SHA256

      5b5541c8a94f98e38ebac66eb5009d36eea569c473be2b2396fe2489e8016893

    • SHA512

      cb3d74d99dd0c5a2599ee836a1155ae7485483e6a4f5ebdab90e1f2dad917da66187ce2a9190659e7e9f18f4b6063d1d09f0e1f49aacbd5fa1329b081e05e0e6

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVn:vHW138/iXWlK885rKlGSekcj66ciEn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks