General

  • Target

    4fa8b7e45fd010a9bd8c8492484828e257d22012af34db7da5331446f322703fN

  • Size

    333KB

  • Sample

    241104-f4s75stpet

  • MD5

    af649e88296ceb9e1d695358491cc750

  • SHA1

    830da14bc248fa18205b5a0cbdb812734ca69b58

  • SHA256

    4fa8b7e45fd010a9bd8c8492484828e257d22012af34db7da5331446f322703f

  • SHA512

    95bf144918ca6ccbfb7d9598f8f35e466cc92231c2cdf83675fc95ef5c75a56024f3148801850e4acf64ba7e00d361db3edf0aece87dcb27c3e57e623e57190a

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPy:vHW138/iXWlK885rKlGSekcj66ciz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      4fa8b7e45fd010a9bd8c8492484828e257d22012af34db7da5331446f322703fN

    • Size

      333KB

    • MD5

      af649e88296ceb9e1d695358491cc750

    • SHA1

      830da14bc248fa18205b5a0cbdb812734ca69b58

    • SHA256

      4fa8b7e45fd010a9bd8c8492484828e257d22012af34db7da5331446f322703f

    • SHA512

      95bf144918ca6ccbfb7d9598f8f35e466cc92231c2cdf83675fc95ef5c75a56024f3148801850e4acf64ba7e00d361db3edf0aece87dcb27c3e57e623e57190a

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPy:vHW138/iXWlK885rKlGSekcj66ciz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks