General

  • Target

    96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572N

  • Size

    330KB

  • Sample

    241105-14gjkaslhq

  • MD5

    3a68bb128a59328497ab1547eb478530

  • SHA1

    8f7a15df1faeb57364891133ea4f8c2f60cc70ac

  • SHA256

    96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572

  • SHA512

    e541c19ea0d9ed197fdda2b5e6dd08bc3ac8464cce5bcfd09a20aecbada77d4ce77235c954fefcb7388ffc03d99e6ae458b33181991f321d24e9eee17379c083

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ci5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572N

    • Size

      330KB

    • MD5

      3a68bb128a59328497ab1547eb478530

    • SHA1

      8f7a15df1faeb57364891133ea4f8c2f60cc70ac

    • SHA256

      96b8750dccde728e22e094fd5469c35a5ce4cab64e85a902858de86e3a443572

    • SHA512

      e541c19ea0d9ed197fdda2b5e6dd08bc3ac8464cce5bcfd09a20aecbada77d4ce77235c954fefcb7388ffc03d99e6ae458b33181991f321d24e9eee17379c083

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ci5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks