General

  • Target

    b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909aN

  • Size

    80KB

  • Sample

    241107-a1my3asbkp

  • MD5

    7685cea159852e354e437f9a4c5a1ae0

  • SHA1

    d46d7da1332fb0fd42781fbf60ed6a31ddd752de

  • SHA256

    b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909a

  • SHA512

    a40e37ed765f447ac02ae6347de8c14963d058654f1c870a76729438ce3af6220483bc2a79c265c5fb4f32863cc5117210fb3ed2a59b02968c0189298549e19b

  • SSDEEP

    1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1A:zLCEZTGx518ox6A

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909aN

    • Size

      80KB

    • MD5

      7685cea159852e354e437f9a4c5a1ae0

    • SHA1

      d46d7da1332fb0fd42781fbf60ed6a31ddd752de

    • SHA256

      b6549b58caf61979eb3187333171d03407c501904f99b160191e86313fd2909a

    • SHA512

      a40e37ed765f447ac02ae6347de8c14963d058654f1c870a76729438ce3af6220483bc2a79c265c5fb4f32863cc5117210fb3ed2a59b02968c0189298549e19b

    • SSDEEP

      1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1A:zLCEZTGx518ox6A

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks