General

  • Target

    c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1N

  • Size

    333KB

  • Sample

    241102-1fd4jawjez

  • MD5

    b73a1d20ba44fc157c979919730d53b0

  • SHA1

    68decb89026da30677cb4a15bfc06fd6731fcc43

  • SHA256

    c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1

  • SHA512

    885e5a1a60ea24c48a0532833c7c0254665d119c53dfc6ede7c929cbf408450235ba9bc295e0eb8e26ec0587c414795c061288bab0d51a5aa4237925e9e09c08

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9D:vHW138/iXWlK885rKlGSekcj66ciWD

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1N

    • Size

      333KB

    • MD5

      b73a1d20ba44fc157c979919730d53b0

    • SHA1

      68decb89026da30677cb4a15bfc06fd6731fcc43

    • SHA256

      c894b6d294b57a79f7f2a1724559625acb76ad59487d4944991c15e8cc364ee1

    • SHA512

      885e5a1a60ea24c48a0532833c7c0254665d119c53dfc6ede7c929cbf408450235ba9bc295e0eb8e26ec0587c414795c061288bab0d51a5aa4237925e9e09c08

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9D:vHW138/iXWlK885rKlGSekcj66ciWD

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks