General

  • Target

    6564923c60842cd137ee1f5eb606f61e573c9cd25fbb4f473213b7a3f26ad550N

  • Size

    51KB

  • Sample

    241030-t8cylsypak

  • MD5

    c8d0eae4bb28c74ce785fceceb2a8760

  • SHA1

    3c6c1716d86b09b4a3a6e514ab2b2762fcbd28d6

  • SHA256

    6564923c60842cd137ee1f5eb606f61e573c9cd25fbb4f473213b7a3f26ad550

  • SHA512

    2b213d137c38faeb12f8444ae5e91ea8f4c0c35dc84530b856b4d5f4fbfd5c72b333faf5668a33eaa9bc11dc25dfeda07bf27f99fa894a4b0ba69f311cfa1644

  • SSDEEP

    768:pcRQ5/pEPH0gw0qN0GPvvpw+8P4twcmaV1Pc5q5bPga/AJFZr:pR/pEPHi0qN0WC+80p1LSGAPp

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      6564923c60842cd137ee1f5eb606f61e573c9cd25fbb4f473213b7a3f26ad550N

    • Size

      51KB

    • MD5

      c8d0eae4bb28c74ce785fceceb2a8760

    • SHA1

      3c6c1716d86b09b4a3a6e514ab2b2762fcbd28d6

    • SHA256

      6564923c60842cd137ee1f5eb606f61e573c9cd25fbb4f473213b7a3f26ad550

    • SHA512

      2b213d137c38faeb12f8444ae5e91ea8f4c0c35dc84530b856b4d5f4fbfd5c72b333faf5668a33eaa9bc11dc25dfeda07bf27f99fa894a4b0ba69f311cfa1644

    • SSDEEP

      768:pcRQ5/pEPH0gw0qN0GPvvpw+8P4twcmaV1Pc5q5bPga/AJFZr:pR/pEPHi0qN0WC+80p1LSGAPp

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks