General

  • Target

    7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1N

  • Size

    333KB

  • Sample

    241029-blk2lasblk

  • MD5

    ede94d90737c8fb49f5bd968f90d32b0

  • SHA1

    b465d4e4a9074ef84ae72f958fc87c324562e65d

  • SHA256

    7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1

  • SHA512

    31e15842f190d5cfd18ca7aca0ef44e583ed2d1b86af89a09d3e025402118c7a94ee21ee8bae2d76ff7e71cf40c95fa49c0cf88a0500477e5f2de45d50ae59dd

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP:vHW138/iXWlK885rKlGSekcj66ci+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1N

    • Size

      333KB

    • MD5

      ede94d90737c8fb49f5bd968f90d32b0

    • SHA1

      b465d4e4a9074ef84ae72f958fc87c324562e65d

    • SHA256

      7b632348a4cf480ea17052307d412c8d7ef5917e777ae9b674d43bae2fcafdd1

    • SHA512

      31e15842f190d5cfd18ca7aca0ef44e583ed2d1b86af89a09d3e025402118c7a94ee21ee8bae2d76ff7e71cf40c95fa49c0cf88a0500477e5f2de45d50ae59dd

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP:vHW138/iXWlK885rKlGSekcj66ci+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks