General

  • Target

    896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe

  • Size

    332KB

  • Sample

    241101-qxtkfazjew

  • MD5

    53b4aad111dd092c1ed41cdacdff51ed

  • SHA1

    529d031eda234ec9ed2c0cf252154544c054176c

  • SHA256

    896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe

  • SHA512

    c8436f4e032d23f0dc8dbc51a2c3e034fee3c40126dab94c0ee0791105ace7bd3ef3fea47b92d4452b860f251273c53412c13e0550b45ad3528838cad403751a

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66ciS

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe

    • Size

      332KB

    • MD5

      53b4aad111dd092c1ed41cdacdff51ed

    • SHA1

      529d031eda234ec9ed2c0cf252154544c054176c

    • SHA256

      896af404b97206a74df3d1213c8b1c5657f0fbbc207aeb4ac30864df5faf3afe

    • SHA512

      c8436f4e032d23f0dc8dbc51a2c3e034fee3c40126dab94c0ee0791105ace7bd3ef3fea47b92d4452b860f251273c53412c13e0550b45ad3528838cad403751a

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYf:vHW138/iXWlK885rKlGSekcj66ciS

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks