General

  • Target

    b8fa304433ab405068b8c19d31c1f45e76215419430e7e5651e4963083be7f35

  • Size

    332KB

  • Sample

    241028-eespmszeja

  • MD5

    2e4cd5974566618cb6ad13032dbf99e6

  • SHA1

    80f1d438c9ea383103d0e0061c6977e5d2344213

  • SHA256

    b8fa304433ab405068b8c19d31c1f45e76215419430e7e5651e4963083be7f35

  • SHA512

    0e2e0f1dd374a57ee1392a65ead2eeea0044715731f2565ce130496733815b8540d57805e57544430394e067bca0b7ed23eb83f549adff9848750613023180a8

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYrh:vHW138/iXWlK885rKlGSekcj66ciY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      b8fa304433ab405068b8c19d31c1f45e76215419430e7e5651e4963083be7f35

    • Size

      332KB

    • MD5

      2e4cd5974566618cb6ad13032dbf99e6

    • SHA1

      80f1d438c9ea383103d0e0061c6977e5d2344213

    • SHA256

      b8fa304433ab405068b8c19d31c1f45e76215419430e7e5651e4963083be7f35

    • SHA512

      0e2e0f1dd374a57ee1392a65ead2eeea0044715731f2565ce130496733815b8540d57805e57544430394e067bca0b7ed23eb83f549adff9848750613023180a8

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYrh:vHW138/iXWlK885rKlGSekcj66ciY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks