General

  • Target

    3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540N

  • Size

    137KB

  • Sample

    241029-eqlepssnc1

  • MD5

    6796127616ea431168ec9def87121570

  • SHA1

    b757b0db9eb418bc53bc180b89d276219b6cc926

  • SHA256

    3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540

  • SHA512

    7decf2528b6a5e1cec54f879c3d7268b90f0c07ed467b2b0cea7d893e92f6e677b52d0a1ea18313eef3504fa32e1b7de065cc0acde80a39f8006e28bb21d1c5e

  • SSDEEP

    1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI3:P/5kqCxiXEcO3XfGf2tMUf6odgR5A43

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540N

    • Size

      137KB

    • MD5

      6796127616ea431168ec9def87121570

    • SHA1

      b757b0db9eb418bc53bc180b89d276219b6cc926

    • SHA256

      3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540

    • SHA512

      7decf2528b6a5e1cec54f879c3d7268b90f0c07ed467b2b0cea7d893e92f6e677b52d0a1ea18313eef3504fa32e1b7de065cc0acde80a39f8006e28bb21d1c5e

    • SSDEEP

      1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI3:P/5kqCxiXEcO3XfGf2tMUf6odgR5A43

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks