General

  • Target

    c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44

  • Size

    328KB

  • Sample

    241107-ewdxtavjgt

  • MD5

    7278c271c2eef03467db27313917b658

  • SHA1

    9629d2d11c22a6da39b2640759db5466900fdece

  • SHA256

    c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44

  • SHA512

    0a71c83047f23e4e451e9df2ce188bd6ea9f41e446b1add9e48118584c76d54cde3ad6252d38fcc4071e15e2bc6f2e0f5f1165112febe15b7d6022c1d2babf39

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMO0B:vHW138/iXWlK885rKlGSekcj66ciRB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44

    • Size

      328KB

    • MD5

      7278c271c2eef03467db27313917b658

    • SHA1

      9629d2d11c22a6da39b2640759db5466900fdece

    • SHA256

      c7f34fcf3ce0cd88cef94ad44beb049b47cd46ae487f882c3a42841949297e44

    • SHA512

      0a71c83047f23e4e451e9df2ce188bd6ea9f41e446b1add9e48118584c76d54cde3ad6252d38fcc4071e15e2bc6f2e0f5f1165112febe15b7d6022c1d2babf39

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYMO0B:vHW138/iXWlK885rKlGSekcj66ciRB

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks