General

  • Target

    ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN

  • Size

    55KB

  • Sample

    241111-19dd4axjhx

  • MD5

    e31afdde3888f10bcc1c616d217c0d20

  • SHA1

    b949a7a8039b113c2033250d3a90da0e470c8e49

  • SHA256

    ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6e

  • SHA512

    13a6f43be2c38bbb67aeddd6cea6803c655a954091f005c6ae4b326ea30f352a6cf059a91fbc6073e9c887e2ccc2b9b939ab0682239dd61d42746c5b584fd817

  • SSDEEP

    1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7C:qwda7KVr0cHneunw1C

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6eN

    • Size

      55KB

    • MD5

      e31afdde3888f10bcc1c616d217c0d20

    • SHA1

      b949a7a8039b113c2033250d3a90da0e470c8e49

    • SHA256

      ba1dabe671659607512ffbdc3a511ab291f71989e44fd9154ad406cd433ada6e

    • SHA512

      13a6f43be2c38bbb67aeddd6cea6803c655a954091f005c6ae4b326ea30f352a6cf059a91fbc6073e9c887e2ccc2b9b939ab0682239dd61d42746c5b584fd817

    • SSDEEP

      1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT7C:qwda7KVr0cHneunw1C

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks