General

  • Target

    abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4fN

  • Size

    499KB

  • Sample

    241105-ywbx1axjgy

  • MD5

    c1498744807f0a299dbb91bb33023760

  • SHA1

    6ac36ff619b2c01bf689d54047fff4e47acdbd2d

  • SHA256

    abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4f

  • SHA512

    b81e5cef86d970056659021727990f85fa976fd64215174a8b4fc0348162d8ed727ba52d0a8981aadbaf3958b6ff518639c46b1a031f418cdeedba5da01dc043

  • SSDEEP

    12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5U:PMUv2LAv9AQ1p4dKW

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4fN

    • Size

      499KB

    • MD5

      c1498744807f0a299dbb91bb33023760

    • SHA1

      6ac36ff619b2c01bf689d54047fff4e47acdbd2d

    • SHA256

      abcb810a0a10b864d14fc65aaea605d03b64cdad8b49caa8e13602c463f15c4f

    • SHA512

      b81e5cef86d970056659021727990f85fa976fd64215174a8b4fc0348162d8ed727ba52d0a8981aadbaf3958b6ff518639c46b1a031f418cdeedba5da01dc043

    • SSDEEP

      12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5U:PMUv2LAv9AQ1p4dKW

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks