General

  • Target

    543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1bN

  • Size

    57KB

  • Sample

    241111-2g8vzaycjf

  • MD5

    a855c4e7f2e17073e06cdcf5f837aa40

  • SHA1

    d499a6142283a15dd7a81360bf65d3528b7f99c0

  • SHA256

    543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1b

  • SHA512

    6f400de71df204507a18970b64fcae5b4d7db2a03425a68eebd6ca10358bb4e61398d9f4cc6b47cfe3c49aecbcceaa68629b08e681a38526e2b7e630000d982a

  • SSDEEP

    1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1k:amZ+luXwy2f9LDhDk

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1bN

    • Size

      57KB

    • MD5

      a855c4e7f2e17073e06cdcf5f837aa40

    • SHA1

      d499a6142283a15dd7a81360bf65d3528b7f99c0

    • SHA256

      543d1bd632ab7ebd394dfb729608bdde88c914135aa0da53233533dbff6feb1b

    • SHA512

      6f400de71df204507a18970b64fcae5b4d7db2a03425a68eebd6ca10358bb4e61398d9f4cc6b47cfe3c49aecbcceaa68629b08e681a38526e2b7e630000d982a

    • SSDEEP

      1536:amZ+4hcuX5uZ79jmvFQTXnz9yQ/PFBhl1k:amZ+luXwy2f9LDhDk

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks