General

  • Target

    d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82

  • Size

    59KB

  • Sample

    241110-dqbd3axqaw

  • MD5

    a50c8e74327c1b87cbd740d5021912cf

  • SHA1

    3d759ac94d4e8a8cf8f8a9d0681220bd222737fd

  • SHA256

    d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82

  • SHA512

    1072f93837c2fed2b8846fb3e1eb8a2249fbb30a2f31f5049bc371fbc48ac8e342af91d103d3897d5cae112f2086f949afef6984215d6f936d3b33ded9cb19da

  • SSDEEP

    768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5u3m:jbQx5oPsr2vFxDPhAvzgdWLIZ79

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82

    • Size

      59KB

    • MD5

      a50c8e74327c1b87cbd740d5021912cf

    • SHA1

      3d759ac94d4e8a8cf8f8a9d0681220bd222737fd

    • SHA256

      d64fda950b45151da02fc419e3f2329d52c74a6ce7cd84c921858f11b2fc7c82

    • SHA512

      1072f93837c2fed2b8846fb3e1eb8a2249fbb30a2f31f5049bc371fbc48ac8e342af91d103d3897d5cae112f2086f949afef6984215d6f936d3b33ded9cb19da

    • SSDEEP

      768:jb4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5Z3WXcKIZx5u3m:jbQx5oPsr2vFxDPhAvzgdWLIZ79

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks