General

  • Target

    c58a54e493ed28635efc5218a3830a3ce759603e7e9ab3a15b625b51281179eeN

  • Size

    169KB

  • Sample

    241110-mp45esvhjg

  • MD5

    547433b1c994e7537f4849297fcca790

  • SHA1

    d7c44fbca8f6516b04243c11936ad08a4067cdaf

  • SHA256

    c58a54e493ed28635efc5218a3830a3ce759603e7e9ab3a15b625b51281179ee

  • SHA512

    6ecc131cbef5c3af4022e7cbf01e951f7bcb6808445e88c5f2f5b5d1bc9e57784dfe2b6487d90b6b9ace6b5482822c0514ee82b383eddf980fbebaa7408dc78d

  • SSDEEP

    3072:yp56zRJ83+OJ7NoGvdwWy6k04yW/KR0Yx4BXPC:yOzRWu27dlOd5/YWVK

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      c58a54e493ed28635efc5218a3830a3ce759603e7e9ab3a15b625b51281179eeN

    • Size

      169KB

    • MD5

      547433b1c994e7537f4849297fcca790

    • SHA1

      d7c44fbca8f6516b04243c11936ad08a4067cdaf

    • SHA256

      c58a54e493ed28635efc5218a3830a3ce759603e7e9ab3a15b625b51281179ee

    • SHA512

      6ecc131cbef5c3af4022e7cbf01e951f7bcb6808445e88c5f2f5b5d1bc9e57784dfe2b6487d90b6b9ace6b5482822c0514ee82b383eddf980fbebaa7408dc78d

    • SSDEEP

      3072:yp56zRJ83+OJ7NoGvdwWy6k04yW/KR0Yx4BXPC:yOzRWu27dlOd5/YWVK

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks