General

  • Target

    2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb

  • Size

    94KB

  • Sample

    241104-zpe7hsxepm

  • MD5

    ee8a913f2854262030bddd60c19fb5d3

  • SHA1

    8831086cbcbc6a8d29f47261a79ac113b19f714e

  • SHA256

    2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb

  • SHA512

    7e14a8fcf14cbcaf089b9d092f389c3501e1a03170eb8b56d44753ff7a7bc1627fc053a0b2779baccaa682ee58d25270074980419e86b383f7a9ba783168531f

  • SSDEEP

    1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cZ:nqV9MziU4piRun7C3CP3MY

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb

    • Size

      94KB

    • MD5

      ee8a913f2854262030bddd60c19fb5d3

    • SHA1

      8831086cbcbc6a8d29f47261a79ac113b19f714e

    • SHA256

      2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb

    • SHA512

      7e14a8fcf14cbcaf089b9d092f389c3501e1a03170eb8b56d44753ff7a7bc1627fc053a0b2779baccaa682ee58d25270074980419e86b383f7a9ba783168531f

    • SSDEEP

      1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cZ:nqV9MziU4piRun7C3CP3MY

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks