General

  • Target

    115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8N

  • Size

    552KB

  • Sample

    241028-r4mwxazkcz

  • MD5

    4489826c2eca1eb1a0123c0c46e6aca0

  • SHA1

    1c006df93d42fa028e21a7f98c6ac8afc5198b25

  • SHA256

    115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8

  • SHA512

    b978da9070fb82166238114fb80f5b48acb6249a0854e5bc0fb695e759684f6e744282ff3c03c074ecf448b873d9993dd085e82c5e572b83b334c3a7435b0456

  • SSDEEP

    12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl8:+rt4/NArwjs5ol8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8N

    • Size

      552KB

    • MD5

      4489826c2eca1eb1a0123c0c46e6aca0

    • SHA1

      1c006df93d42fa028e21a7f98c6ac8afc5198b25

    • SHA256

      115952ec8a3a073ab20b7df3a238a827b8fed5032be3e5c67d680230552121b8

    • SHA512

      b978da9070fb82166238114fb80f5b48acb6249a0854e5bc0fb695e759684f6e744282ff3c03c074ecf448b873d9993dd085e82c5e572b83b334c3a7435b0456

    • SSDEEP

      12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl8:+rt4/NArwjs5ol8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks