General

  • Target

    c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33N

  • Size

    508KB

  • Sample

    241109-cgyybsvdqe

  • MD5

    8c988034c138f1a4ab47d329561858b0

  • SHA1

    89606697c62c89531e16f2944446ba8e7454d0f6

  • SHA256

    c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33

  • SHA512

    786582f45080c482cc105a7a9e70473b58d9a1e28c8712c94175fbdfe7a9114c873a6ab51ea9738b282e6b516980b83ec2e7d328c1f72f6adfec45cdfc9a89a4

  • SSDEEP

    12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5Wl:PMUv2LAv9AQ1p4dKAl

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33N

    • Size

      508KB

    • MD5

      8c988034c138f1a4ab47d329561858b0

    • SHA1

      89606697c62c89531e16f2944446ba8e7454d0f6

    • SHA256

      c64a982e271d889db4868885ba61582e3f1e49c68580f00716e4db6075883e33

    • SHA512

      786582f45080c482cc105a7a9e70473b58d9a1e28c8712c94175fbdfe7a9114c873a6ab51ea9738b282e6b516980b83ec2e7d328c1f72f6adfec45cdfc9a89a4

    • SSDEEP

      12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5Wl:PMUv2LAv9AQ1p4dKAl

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks