General

  • Target

    d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086N

  • Size

    94KB

  • Sample

    241108-qsqb8atbka

  • MD5

    5cced4fc225a18cd4966d154824a48f0

  • SHA1

    5dca6fb4d5039d9c53508cceebd6129871d55033

  • SHA256

    d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086

  • SHA512

    7584537105ba782c3de100bd4ed820f2509cf85dfd3e0b2c81dbe78adb9f80b0a6685d097680c2c812667b514240fb43ac381a29c69fd80261f8894549b4be91

  • SSDEEP

    1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9c5:nqV9MziU4piRun7C3CP3Ms

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086N

    • Size

      94KB

    • MD5

      5cced4fc225a18cd4966d154824a48f0

    • SHA1

      5dca6fb4d5039d9c53508cceebd6129871d55033

    • SHA256

      d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086

    • SHA512

      7584537105ba782c3de100bd4ed820f2509cf85dfd3e0b2c81dbe78adb9f80b0a6685d097680c2c812667b514240fb43ac381a29c69fd80261f8894549b4be91

    • SSDEEP

      1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9c5:nqV9MziU4piRun7C3CP3Ms

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks