General

  • Target

    652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1caN

  • Size

    55KB

  • Sample

    241110-qn4n2sxjbz

  • MD5

    0f41cf6554c89c7486ddce00aaaff410

  • SHA1

    473f131630e86be55efb00eeb64f90a91e6e1578

  • SHA256

    652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1ca

  • SHA512

    c64eedbce5320fe0cc0517ff054ed22195522b636a2f4c586edab49cbb80e37066570fabd9e5bf8c00308b40e16c9fe45dbff14c0e7231e0310ec2e911f4626f

  • SSDEEP

    1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7o:qwda7KVr0cHneunw1o

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1caN

    • Size

      55KB

    • MD5

      0f41cf6554c89c7486ddce00aaaff410

    • SHA1

      473f131630e86be55efb00eeb64f90a91e6e1578

    • SHA256

      652b84b4eb5106f43433b5a98ced1d0f3d8dad22d8ea3b75c7bf4a21967ce1ca

    • SHA512

      c64eedbce5320fe0cc0517ff054ed22195522b636a2f4c586edab49cbb80e37066570fabd9e5bf8c00308b40e16c9fe45dbff14c0e7231e0310ec2e911f4626f

    • SSDEEP

      1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7o:qwda7KVr0cHneunw1o

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks