General

  • Target

    68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276bN

  • Size

    330KB

  • Sample

    241109-vn1dvaxnbt

  • MD5

    435eee9efda9b0d01f48fbd3a90f2e40

  • SHA1

    106d2b28251042020e84140671e3755396ce1214

  • SHA256

    68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276b

  • SHA512

    4999741809c920713a8d426a989f39bb9aeb6df38b1ffc2df4afdd5fefe6ae3ff5c4310f112696a950e51dd12a0d34778b1596a74b7e9c4d1175eace592bc020

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYu:vHW138/iXWlK885rKlGSekcj66cir

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276bN

    • Size

      330KB

    • MD5

      435eee9efda9b0d01f48fbd3a90f2e40

    • SHA1

      106d2b28251042020e84140671e3755396ce1214

    • SHA256

      68249b9f12d6ceb8d01642792aa0c339be98db13f347221a3eccd34b06ff276b

    • SHA512

      4999741809c920713a8d426a989f39bb9aeb6df38b1ffc2df4afdd5fefe6ae3ff5c4310f112696a950e51dd12a0d34778b1596a74b7e9c4d1175eace592bc020

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYu:vHW138/iXWlK885rKlGSekcj66cir

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks