General

  • Target

    448596f64dbfad0f0179b6393f0d6aa540548062b6588058feacbdaddb5af890N

  • Size

    60KB

  • Sample

    241030-khbs7azcpa

  • MD5

    d802c3bd3073e11033d842b01dd56f70

  • SHA1

    e2fcb1dd18cd98099c5dde1d42cfb7f83d189777

  • SHA256

    448596f64dbfad0f0179b6393f0d6aa540548062b6588058feacbdaddb5af890

  • SHA512

    4508bae5f3dda8d280bc94ed9681460c54d60253565eff0037649138d59bc54f47a815d70bb8bf96335c1dd71a05a8d5201d9085afbd0960fdcb5c32137973cc

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPF:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdu

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      448596f64dbfad0f0179b6393f0d6aa540548062b6588058feacbdaddb5af890N

    • Size

      60KB

    • MD5

      d802c3bd3073e11033d842b01dd56f70

    • SHA1

      e2fcb1dd18cd98099c5dde1d42cfb7f83d189777

    • SHA256

      448596f64dbfad0f0179b6393f0d6aa540548062b6588058feacbdaddb5af890

    • SHA512

      4508bae5f3dda8d280bc94ed9681460c54d60253565eff0037649138d59bc54f47a815d70bb8bf96335c1dd71a05a8d5201d9085afbd0960fdcb5c32137973cc

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPF:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdu

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks