General

  • Target

    72510205ae8ba9782eb96fe83b2c7fb6c8b49696c32302c56be0fdfc3bb0e831

  • Size

    264KB

  • Sample

    241109-aadygasjfs

  • MD5

    e68b9afabc211e801788560b1e3c81db

  • SHA1

    a963e92f4db0ea49b7c512358c6c137aab1b6304

  • SHA256

    72510205ae8ba9782eb96fe83b2c7fb6c8b49696c32302c56be0fdfc3bb0e831

  • SHA512

    c7c39bdaae1ae83960755725956359423ade85943d54f6ea0cb57a2f1115e5b2716ae50a15b34b6c51d7c5ecf3050b19bfb5ad7e2f86c0269664eb5e87da00fc

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaI:ASeyGpTaesaQUufkL57YsL9NIx9ANaI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      72510205ae8ba9782eb96fe83b2c7fb6c8b49696c32302c56be0fdfc3bb0e831

    • Size

      264KB

    • MD5

      e68b9afabc211e801788560b1e3c81db

    • SHA1

      a963e92f4db0ea49b7c512358c6c137aab1b6304

    • SHA256

      72510205ae8ba9782eb96fe83b2c7fb6c8b49696c32302c56be0fdfc3bb0e831

    • SHA512

      c7c39bdaae1ae83960755725956359423ade85943d54f6ea0cb57a2f1115e5b2716ae50a15b34b6c51d7c5ecf3050b19bfb5ad7e2f86c0269664eb5e87da00fc

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaI:ASeyGpTaesaQUufkL57YsL9NIx9ANaI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks