General

  • Target

    62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778

  • Size

    333KB

  • Sample

    241028-aafgaswemm

  • MD5

    a08624aa8369a8873d683590fb3f0fed

  • SHA1

    75cb37084b41f2cfc3d9e4ec990a19631375e2b4

  • SHA256

    62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778

  • SHA512

    7431757670d2359ff3fe8a4ca2319ca09e1f3fafb769e3e6c91fdd47d69e978362fcea45995723435fd13bcc3b133a6300cba392659d6a068487d66023639088

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9P:vHW138/iXWlK885rKlGSekcj66ciWP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778

    • Size

      333KB

    • MD5

      a08624aa8369a8873d683590fb3f0fed

    • SHA1

      75cb37084b41f2cfc3d9e4ec990a19631375e2b4

    • SHA256

      62330b9026c956b6580fd086b2171bf50887fe298259ac0b7e53d9e019f59778

    • SHA512

      7431757670d2359ff3fe8a4ca2319ca09e1f3fafb769e3e6c91fdd47d69e978362fcea45995723435fd13bcc3b133a6300cba392659d6a068487d66023639088

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9P:vHW138/iXWlK885rKlGSekcj66ciWP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks