General

  • Target

    e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfaN

  • Size

    67KB

  • Sample

    241028-sdxh4asclm

  • MD5

    96b6d61a52490f9f803fb2f2fabddfd0

  • SHA1

    72cf5e817bc5b582929fb70784ad7051d4d641b9

  • SHA256

    e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfa

  • SHA512

    54a52557d7dd1f631c30bb386ba102f2a0ed371eb61487b97e690f93c7449dad5f8a83f891933676d4cc2bc0f35690fb16740f474ef0a15ec3f53c92a1ff9c95

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare/:yLAYUzmdD0sMQl7d7IuhCai/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfaN

    • Size

      67KB

    • MD5

      96b6d61a52490f9f803fb2f2fabddfd0

    • SHA1

      72cf5e817bc5b582929fb70784ad7051d4d641b9

    • SHA256

      e8359c1b065cbad6c25945f39e031ba481d2727d2be43e04f76f52a26b043cfa

    • SHA512

      54a52557d7dd1f631c30bb386ba102f2a0ed371eb61487b97e690f93c7449dad5f8a83f891933676d4cc2bc0f35690fb16740f474ef0a15ec3f53c92a1ff9c95

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCare/:yLAYUzmdD0sMQl7d7IuhCai/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks