General

  • Target

    31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d

  • Size

    62KB

  • Sample

    241111-zttkpszkcj

  • MD5

    7418f5d7e50d9b410c0ac7baec9a894b

  • SHA1

    bdca1455fbca27f4dd183d761ff63c3023f55c67

  • SHA256

    31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d

  • SHA512

    bc370d63876c37c1295542d49bb697977a30137dde340e4b748d75f72a3c2d921e9d7ac89311fffb0e203b214f4739e524d638bbe9f65bc4bd1d299c2749bbd4

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVT:Jo0cAthu6+FQ0JuPkT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d

    • Size

      62KB

    • MD5

      7418f5d7e50d9b410c0ac7baec9a894b

    • SHA1

      bdca1455fbca27f4dd183d761ff63c3023f55c67

    • SHA256

      31f07747ce71885358dd49f3416aca8290a6684ba699a8ad97448819ce3c467d

    • SHA512

      bc370d63876c37c1295542d49bb697977a30137dde340e4b748d75f72a3c2d921e9d7ac89311fffb0e203b214f4739e524d638bbe9f65bc4bd1d299c2749bbd4

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVT:Jo0cAthu6+FQ0JuPkT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks