General

  • Target

    3315e164547f46e82ec184ec5d2be55d11081e5eecb54de5833e673b4651278d

  • Size

    197KB

  • Sample

    241101-cxsq9axmcr

  • MD5

    86db93c8e9ae99403ac25ae3920c29d7

  • SHA1

    a622a7c55864c5f5c58cf142569a158235a877ac

  • SHA256

    3315e164547f46e82ec184ec5d2be55d11081e5eecb54de5833e673b4651278d

  • SHA512

    3612cf620eb765f011a9fc79a381d2727583c0ba7da430a9632033ff60c072d93f2a24add2964c7cab23f6438671511e55e74f56211640f6fc6e4165b5b4a9d2

  • SSDEEP

    3072:HlFv8dvfdEDRmycmX260ps0GAqjuVZ6rNOjdu5k:H/v8trzlOYqjuCNe9

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3315e164547f46e82ec184ec5d2be55d11081e5eecb54de5833e673b4651278d

    • Size

      197KB

    • MD5

      86db93c8e9ae99403ac25ae3920c29d7

    • SHA1

      a622a7c55864c5f5c58cf142569a158235a877ac

    • SHA256

      3315e164547f46e82ec184ec5d2be55d11081e5eecb54de5833e673b4651278d

    • SHA512

      3612cf620eb765f011a9fc79a381d2727583c0ba7da430a9632033ff60c072d93f2a24add2964c7cab23f6438671511e55e74f56211640f6fc6e4165b5b4a9d2

    • SSDEEP

      3072:HlFv8dvfdEDRmycmX260ps0GAqjuVZ6rNOjdu5k:H/v8trzlOYqjuCNe9

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks