General

  • Target

    76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a

  • Size

    80KB

  • Sample

    241112-3ndtvatbma

  • MD5

    478ed604f87c3820b72fbaf5803f6a47

  • SHA1

    e89945f9ab8a41aaf93a74b348dc0a3d95e49d83

  • SHA256

    76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a

  • SHA512

    f90d4745a236af07d0702fa7634286cb89564980092c806c7b0a4367b2c9d727c41c6301a719df582510ce87e874c4ac38f363b53a1f3b287b169d84a259526e

  • SSDEEP

    1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1p:zLCEZTGx518ox6p

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a

    • Size

      80KB

    • MD5

      478ed604f87c3820b72fbaf5803f6a47

    • SHA1

      e89945f9ab8a41aaf93a74b348dc0a3d95e49d83

    • SHA256

      76d21484127516df1585bfc2862602b638873211074606913e4e3cc5b8a1371a

    • SHA512

      f90d4745a236af07d0702fa7634286cb89564980092c806c7b0a4367b2c9d727c41c6301a719df582510ce87e874c4ac38f363b53a1f3b287b169d84a259526e

    • SSDEEP

      1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1p:zLCEZTGx518ox6p

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks