General

  • Target

    3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2cN

  • Size

    505KB

  • Sample

    241110-nyjerawfre

  • MD5

    b04f960d5f9867d22751ec57e00a51a0

  • SHA1

    77d6e5b9ac6cb3c3f290d0b7e8e4de1f8e5bdfaf

  • SHA256

    3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2c

  • SHA512

    c2e72f2af0d450591e4ee4a1050bf1abeaa39c9980b6394f855e1fd437efa525ec17744ac01560fc48424ef3612b05d5c7f6c7128a09bed89d6c2c3a1cde63a8

  • SSDEEP

    12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5p:PMUv2LAv9AQ1p4dKT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2cN

    • Size

      505KB

    • MD5

      b04f960d5f9867d22751ec57e00a51a0

    • SHA1

      77d6e5b9ac6cb3c3f290d0b7e8e4de1f8e5bdfaf

    • SHA256

      3e36d5da828a02f90dae7de8369005c3007408404b818a3d4464acba2f46fc2c

    • SHA512

      c2e72f2af0d450591e4ee4a1050bf1abeaa39c9980b6394f855e1fd437efa525ec17744ac01560fc48424ef3612b05d5c7f6c7128a09bed89d6c2c3a1cde63a8

    • SSDEEP

      12288:Po7CGWcQSyYI2VrFKH5RBv9AQ1pEDdK5p:PMUv2LAv9AQ1p4dKT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks