General

  • Target

    ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc

  • Size

    332KB

  • Sample

    241102-jj2wbs1dnr

  • MD5

    c667e50123f002e1f2c03e2b39241a5d

  • SHA1

    d88af9b44a3edae04e48b4fdb0aa271bc5a1f6cd

  • SHA256

    ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc

  • SHA512

    fc7702185feb529d21af9a14c6b451a807087e838b73a4970d4bd5258d496bd952d95d73373f5836737937a41888f8781f77e0a0a0eb11835054984980fc1218

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYV5:vHW138/iXWlK885rKlGSekcj66ciE5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc

    • Size

      332KB

    • MD5

      c667e50123f002e1f2c03e2b39241a5d

    • SHA1

      d88af9b44a3edae04e48b4fdb0aa271bc5a1f6cd

    • SHA256

      ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc

    • SHA512

      fc7702185feb529d21af9a14c6b451a807087e838b73a4970d4bd5258d496bd952d95d73373f5836737937a41888f8781f77e0a0a0eb11835054984980fc1218

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYV5:vHW138/iXWlK885rKlGSekcj66ciE5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks