General

  • Target

    41c30ab8d57535ff7528e65ede130a88d3bf5a5cf75586d3ec33ea38f084cf72N

  • Size

    326KB

  • Sample

    241028-p33jvsxmgz

  • MD5

    50a3d5650fd5b53e793e526147985840

  • SHA1

    8e7bc7907a5f24c7bd3331ee3d7ac8b32617b042

  • SHA256

    41c30ab8d57535ff7528e65ede130a88d3bf5a5cf75586d3ec33ea38f084cf72

  • SHA512

    79b3208a137098624c847a42cf8fc3370428cafb350b91532ac592b239ebaac55811ff60a2fba5e022097510429b6b2505b7b063786e4dff8650841123636548

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5:vHW138/iXWlK885rKlGSekcj66ci0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      41c30ab8d57535ff7528e65ede130a88d3bf5a5cf75586d3ec33ea38f084cf72N

    • Size

      326KB

    • MD5

      50a3d5650fd5b53e793e526147985840

    • SHA1

      8e7bc7907a5f24c7bd3331ee3d7ac8b32617b042

    • SHA256

      41c30ab8d57535ff7528e65ede130a88d3bf5a5cf75586d3ec33ea38f084cf72

    • SHA512

      79b3208a137098624c847a42cf8fc3370428cafb350b91532ac592b239ebaac55811ff60a2fba5e022097510429b6b2505b7b063786e4dff8650841123636548

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5:vHW138/iXWlK885rKlGSekcj66ci0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks