General

  • Target

    105612a0af7055c61b91501d1242d451e9563138add2c30c46f710c9f90517c2N

  • Size

    333KB

  • Sample

    241030-slps8awcqe

  • MD5

    6d61e7016b9e79cdbf94a20528deb790

  • SHA1

    72cfd35595e436fc26b396829865860a6033d16e

  • SHA256

    105612a0af7055c61b91501d1242d451e9563138add2c30c46f710c9f90517c2

  • SHA512

    3a4a566107d6fd420ed9a698f15fd7f21b87b7346bbc5bc60418a746cf610e9acd51cedc5967334203ef85b357bbb46fba1382d304ea79aed2dd3ef817474259

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP1:vHW138/iXWlK885rKlGSekcj66ciU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      105612a0af7055c61b91501d1242d451e9563138add2c30c46f710c9f90517c2N

    • Size

      333KB

    • MD5

      6d61e7016b9e79cdbf94a20528deb790

    • SHA1

      72cfd35595e436fc26b396829865860a6033d16e

    • SHA256

      105612a0af7055c61b91501d1242d451e9563138add2c30c46f710c9f90517c2

    • SHA512

      3a4a566107d6fd420ed9a698f15fd7f21b87b7346bbc5bc60418a746cf610e9acd51cedc5967334203ef85b357bbb46fba1382d304ea79aed2dd3ef817474259

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYP1:vHW138/iXWlK885rKlGSekcj66ciU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks