General

  • Target

    ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996N

  • Size

    501KB

  • Sample

    241104-trqs5sskdt

  • MD5

    0310c3acb1be722cb0b048edf61a5ce0

  • SHA1

    8babab2d4ebd61b02dd6d5f924bfd8ffc0ea53e8

  • SHA256

    ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996

  • SHA512

    992c8a167f92703d713801f16fa663d4c09b7738daa2772c9022b313a2a59cdc78a6c280d1025fc939cd21bc94d7b1c6a442a62ca03d87511cbb49045cfe25da

  • SSDEEP

    12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5x:PMUv2LAv9AQ1p4dKP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996N

    • Size

      501KB

    • MD5

      0310c3acb1be722cb0b048edf61a5ce0

    • SHA1

      8babab2d4ebd61b02dd6d5f924bfd8ffc0ea53e8

    • SHA256

      ce6c31313b8164944cd16a1c9e0cd473f571861dcef444c69885f61138a2f996

    • SHA512

      992c8a167f92703d713801f16fa663d4c09b7738daa2772c9022b313a2a59cdc78a6c280d1025fc939cd21bc94d7b1c6a442a62ca03d87511cbb49045cfe25da

    • SSDEEP

      12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5x:PMUv2LAv9AQ1p4dKP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks