General

  • Target

    98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0N

  • Size

    64KB

  • Sample

    241110-bkw3gawere

  • MD5

    06be482fb128c36dda1b20ffb3dcce10

  • SHA1

    c2e9ede70cbbb927ad9f87ca34678aaeb622422c

  • SHA256

    98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0

  • SHA512

    5f9f9b239bccb09c3c2c2e61d252f02f003f606b80c5e6e1b2f40432ad353d2a4d5fae9da5489d6deb8edaf9295399b2d56718114db19c9370a1ee2731ce3c90

  • SSDEEP

    1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/F:6bQRSHpAvzyf7MzeTYF

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0N

    • Size

      64KB

    • MD5

      06be482fb128c36dda1b20ffb3dcce10

    • SHA1

      c2e9ede70cbbb927ad9f87ca34678aaeb622422c

    • SHA256

      98392e6067c52c9527ab54d68a826e6a23d227e1feb2cd903d6d6196fb1278e0

    • SHA512

      5f9f9b239bccb09c3c2c2e61d252f02f003f606b80c5e6e1b2f40432ad353d2a4d5fae9da5489d6deb8edaf9295399b2d56718114db19c9370a1ee2731ce3c90

    • SSDEEP

      1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/F:6bQRSHpAvzyf7MzeTYF

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks