General

  • Target

    a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d

  • Size

    62KB

  • Sample

    241111-cg6yyayrhw

  • MD5

    28f5c0ad594aea9bd980ffcb779c3da2

  • SHA1

    41d75d0561899bd96818216ba1ac72ea1d45a027

  • SHA256

    a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d

  • SHA512

    289b24963866654e165a00dc30ac505add85ded13188ec7d71f8120660c89eb1a73b3e928c4d4cdd48f5e3565ed65d3d92ad7e61e2a929e4f06ab1deb9a14780

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROV8:Jo0cAthu6+FQ0JuPk8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d

    • Size

      62KB

    • MD5

      28f5c0ad594aea9bd980ffcb779c3da2

    • SHA1

      41d75d0561899bd96818216ba1ac72ea1d45a027

    • SHA256

      a88e3438090cdb7a5df06f6d49223a0d34f048bda9d3f232ba0f6389574ff23d

    • SHA512

      289b24963866654e165a00dc30ac505add85ded13188ec7d71f8120660c89eb1a73b3e928c4d4cdd48f5e3565ed65d3d92ad7e61e2a929e4f06ab1deb9a14780

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROV8:Jo0cAthu6+FQ0JuPk8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks