General

  • Target

    67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd

  • Size

    507KB

  • Sample

    241101-jlfe4sydje

  • MD5

    a9eaeb04e896a02140c7bbdbf5845a0e

  • SHA1

    cbf857f9a0bf3a2db43d0320d3ea29f1914ac8c7

  • SHA256

    67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd

  • SHA512

    70dedcea8fcdbf85dc2eb9c40ec271ba207516b8074a4f8ba21d78dc1acb0c994e3d42d6d19af7e73d54e4dc6e2ce227d0f08cca1f6a439ffac43c322d642efc

  • SSDEEP

    12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5s:PMUv2LAv9AQ1p4dKC

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd

    • Size

      507KB

    • MD5

      a9eaeb04e896a02140c7bbdbf5845a0e

    • SHA1

      cbf857f9a0bf3a2db43d0320d3ea29f1914ac8c7

    • SHA256

      67069ade38948696e890bb072ab04ead3cd06e00bb05f90f0fd72463e66380dd

    • SHA512

      70dedcea8fcdbf85dc2eb9c40ec271ba207516b8074a4f8ba21d78dc1acb0c994e3d42d6d19af7e73d54e4dc6e2ce227d0f08cca1f6a439ffac43c322d642efc

    • SSDEEP

      12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5s:PMUv2LAv9AQ1p4dKC

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks