General

  • Target

    0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42aN

  • Size

    446KB

  • Sample

    241030-m56cesscqn

  • MD5

    019dd5686e62593b1a205d4d1a4b85d0

  • SHA1

    2e9ecbe2eb2d55692a299be7f155117284f077de

  • SHA256

    0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42a

  • SHA512

    c083b7175daca3d47ca5e6b723de9178367be5dc1cd6a49f2509649e245a73ff83ca05e52626c0971dda3bd1c176d2182c40b1a884c1963bf9b20e77c3e43460

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoG:PMpASIcWYx2U6hAJQnS

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42aN

    • Size

      446KB

    • MD5

      019dd5686e62593b1a205d4d1a4b85d0

    • SHA1

      2e9ecbe2eb2d55692a299be7f155117284f077de

    • SHA256

      0430d47ffd2ba594f4d9c097f1196404088be865e3224d692a4aa5d43ea7f42a

    • SHA512

      c083b7175daca3d47ca5e6b723de9178367be5dc1cd6a49f2509649e245a73ff83ca05e52626c0971dda3bd1c176d2182c40b1a884c1963bf9b20e77c3e43460

    • SSDEEP

      6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoG:PMpASIcWYx2U6hAJQnS

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks