General

  • Target

    83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080

  • Size

    557KB

  • Sample

    241112-anr29azgne

  • MD5

    2050e0d2beef8b99c228a4635fecf906

  • SHA1

    a91d4724974124937538e6467b6f03b6c4415d01

  • SHA256

    83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080

  • SHA512

    9876599d9682ed38fd10f4ceca2df1655d8dd947b5122d6705745df547d85cb4a8ebd0403b5e24482ee302f879b0b3b5bf36d339fe805640af23ea69035e9cfd

  • SSDEEP

    12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyH:znPfQp9L3olqFH

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080

    • Size

      557KB

    • MD5

      2050e0d2beef8b99c228a4635fecf906

    • SHA1

      a91d4724974124937538e6467b6f03b6c4415d01

    • SHA256

      83e21c657b4b81773ba3783cd925aa3451acd334956b9e0a30dcf9186c218080

    • SHA512

      9876599d9682ed38fd10f4ceca2df1655d8dd947b5122d6705745df547d85cb4a8ebd0403b5e24482ee302f879b0b3b5bf36d339fe805640af23ea69035e9cfd

    • SSDEEP

      12288:zccNvdRExZGe+Q1nSoS++43x+l7QLiaEyH:znPfQp9L3olqFH

    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks