General

  • Target

    fc4662a787af50d455e51f72d20b3b0613253af06564f13cd96dfc1c6c63e76fN

  • Size

    67KB

  • Sample

    241101-n4r9va1bmn

  • MD5

    b04499472a96b12d4e66266c14d2d630

  • SHA1

    3bca0d0b1f15584723f5dad28ee1dc521261bae2

  • SHA256

    fc4662a787af50d455e51f72d20b3b0613253af06564f13cd96dfc1c6c63e76f

  • SHA512

    045fe7b2e30a8da0c1a60b8637381c0234ab5e507aac6ef8ef9cafe48e226b2712fafcb2788a9f9c92de77d1e7ffeece5161fc6674d215365c6fe611f0ddfb8c

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarQ:yLAYUzmdD0sMQl7d7IuhCaU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      fc4662a787af50d455e51f72d20b3b0613253af06564f13cd96dfc1c6c63e76fN

    • Size

      67KB

    • MD5

      b04499472a96b12d4e66266c14d2d630

    • SHA1

      3bca0d0b1f15584723f5dad28ee1dc521261bae2

    • SHA256

      fc4662a787af50d455e51f72d20b3b0613253af06564f13cd96dfc1c6c63e76f

    • SHA512

      045fe7b2e30a8da0c1a60b8637381c0234ab5e507aac6ef8ef9cafe48e226b2712fafcb2788a9f9c92de77d1e7ffeece5161fc6674d215365c6fe611f0ddfb8c

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarQ:yLAYUzmdD0sMQl7d7IuhCaU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks