General

  • Target

    378c0e918ece70f116fff3289db09765609ffc7579821c7e5d2860b59b26f995N

  • Size

    324KB

  • Sample

    241028-zsa2zaxemr

  • MD5

    597949f45a51a183b2cb794f4ebe2f60

  • SHA1

    ca85370e47fbfa1424d4ab7e89e0286a68a41fa8

  • SHA256

    378c0e918ece70f116fff3289db09765609ffc7579821c7e5d2860b59b26f995

  • SHA512

    7240a58c3330b87d094727e4f87bd52929ac86f4444cbf54ee006003d8a3a0b1e82da754b08a9e43cabf030a03ffca14d7bbfe3979b6d14036fd65faf6c55345

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYH:vHW138/iXWlK885rKlGSekcj66cie

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      378c0e918ece70f116fff3289db09765609ffc7579821c7e5d2860b59b26f995N

    • Size

      324KB

    • MD5

      597949f45a51a183b2cb794f4ebe2f60

    • SHA1

      ca85370e47fbfa1424d4ab7e89e0286a68a41fa8

    • SHA256

      378c0e918ece70f116fff3289db09765609ffc7579821c7e5d2860b59b26f995

    • SHA512

      7240a58c3330b87d094727e4f87bd52929ac86f4444cbf54ee006003d8a3a0b1e82da754b08a9e43cabf030a03ffca14d7bbfe3979b6d14036fd65faf6c55345

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYH:vHW138/iXWlK885rKlGSekcj66cie

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks