General

  • Target

    13e083e73c0c9b10417abb2f235642c34987b306e8184f48ed09b8f8238be398N

  • Size

    332KB

  • Sample

    241104-dwrm8ssgqm

  • MD5

    d4dc0d308df5e95206a3996e1826e0f0

  • SHA1

    11d31cdf3db5943ad568af9beb1ea22138a29ecf

  • SHA256

    13e083e73c0c9b10417abb2f235642c34987b306e8184f48ed09b8f8238be398

  • SHA512

    3a12527907ea4a9a10bffb8401dc3218c58a29e7e0782bfde678b99f327dd5f99b506fef43e15d7927aea1e44515e14375f240226f22fff1e20ac5355234c092

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVj:vHW138/iXWlK885rKlGSekcj66ciEj

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      13e083e73c0c9b10417abb2f235642c34987b306e8184f48ed09b8f8238be398N

    • Size

      332KB

    • MD5

      d4dc0d308df5e95206a3996e1826e0f0

    • SHA1

      11d31cdf3db5943ad568af9beb1ea22138a29ecf

    • SHA256

      13e083e73c0c9b10417abb2f235642c34987b306e8184f48ed09b8f8238be398

    • SHA512

      3a12527907ea4a9a10bffb8401dc3218c58a29e7e0782bfde678b99f327dd5f99b506fef43e15d7927aea1e44515e14375f240226f22fff1e20ac5355234c092

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVj:vHW138/iXWlK885rKlGSekcj66ciEj

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks