General

  • Target

    d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621eN

  • Size

    57KB

  • Sample

    241104-y17kgawkas

  • MD5

    b24a504f5c5f7eac5cc678c2895e0420

  • SHA1

    6ae0e33e036e8faf662b2e47efdb9de72a9d8e0d

  • SHA256

    d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621e

  • SHA512

    4ed71d259c967cf8b16d53260ce60a48187926acd226616661b85c11ecbe025728032193606b0da8635177f5a9439a4ada9ae27bb9672e6dfcd5feaf806fafd3

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8T:MOemdTd1o74qlmbbJ+x+Ikx

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621eN

    • Size

      57KB

    • MD5

      b24a504f5c5f7eac5cc678c2895e0420

    • SHA1

      6ae0e33e036e8faf662b2e47efdb9de72a9d8e0d

    • SHA256

      d172e96253442c43692bb502dcffa2aa08d8b7f17180d9b1242222098bda621e

    • SHA512

      4ed71d259c967cf8b16d53260ce60a48187926acd226616661b85c11ecbe025728032193606b0da8635177f5a9439a4ada9ae27bb9672e6dfcd5feaf806fafd3

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8T:MOemdTd1o74qlmbbJ+x+Ikx

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks