General

  • Target

    a6fda62fa8bd6ce667ef4cf48a42af1050cf772c590e5f4560a9201f2329a366N

  • Size

    401KB

  • Sample

    241030-y8jhls1bmn

  • MD5

    4de6e6304b3fbb9ca92fbad39596dee0

  • SHA1

    95aa573024715a3baf312933dfe256cf67f1da6d

  • SHA256

    a6fda62fa8bd6ce667ef4cf48a42af1050cf772c590e5f4560a9201f2329a366

  • SHA512

    d279c2d097bd41f7d9c91bb13be4d78cb14ee1812e4ce87692be6d5a68e36aabb8c35a1a8402f91c2bbda33e1f3661230cf832e8760a5c0c4a0c0e2f05cf497a

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohB:8IfBoDWoyFblU6hAJQnO3

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      a6fda62fa8bd6ce667ef4cf48a42af1050cf772c590e5f4560a9201f2329a366N

    • Size

      401KB

    • MD5

      4de6e6304b3fbb9ca92fbad39596dee0

    • SHA1

      95aa573024715a3baf312933dfe256cf67f1da6d

    • SHA256

      a6fda62fa8bd6ce667ef4cf48a42af1050cf772c590e5f4560a9201f2329a366

    • SHA512

      d279c2d097bd41f7d9c91bb13be4d78cb14ee1812e4ce87692be6d5a68e36aabb8c35a1a8402f91c2bbda33e1f3661230cf832e8760a5c0c4a0c0e2f05cf497a

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohB:8IfBoDWoyFblU6hAJQnO3

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks