General

  • Target

    95413e2e8b2dc09cee2d38127fc970901c2e26125c74ca0d26c3009055bc196bN

  • Size

    62KB

  • Sample

    241103-tbgkjaydll

  • MD5

    9f84a836dcb05b2814292a4f87728560

  • SHA1

    576d67df08343982ab95f779713ea8ffca8c02c6

  • SHA256

    95413e2e8b2dc09cee2d38127fc970901c2e26125c74ca0d26c3009055bc196b

  • SHA512

    bde1e2da8a095ee265fef99ea59484a21f9db4b4db7b063bfd6c375ed1953efe703089e3ff67205a6a39fe5ddf4ff5a7fab2f755c034bfde248ad1f8cb0cf85b

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVY:Jo0cAthu6+FQ0JuPkY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      95413e2e8b2dc09cee2d38127fc970901c2e26125c74ca0d26c3009055bc196bN

    • Size

      62KB

    • MD5

      9f84a836dcb05b2814292a4f87728560

    • SHA1

      576d67df08343982ab95f779713ea8ffca8c02c6

    • SHA256

      95413e2e8b2dc09cee2d38127fc970901c2e26125c74ca0d26c3009055bc196b

    • SHA512

      bde1e2da8a095ee265fef99ea59484a21f9db4b4db7b063bfd6c375ed1953efe703089e3ff67205a6a39fe5ddf4ff5a7fab2f755c034bfde248ad1f8cb0cf85b

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVY:Jo0cAthu6+FQ0JuPkY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks