General

  • Target

    6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085N

  • Size

    55KB

  • Sample

    241112-e5ekpstpfz

  • MD5

    03b5b44f6577ee7c2d5f5cf45b80d1b0

  • SHA1

    3d7601cd48017bf372fd5e8d9301e3defc85fe20

  • SHA256

    6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085

  • SHA512

    b5398eef8c8d0100ac45f244f653fdd3da134159aa6da49c9b9937314c7ca6629a75a3ea9bdee792c1b23d76bb2025b2c970af1b392e26b267c65d65da581f74

  • SSDEEP

    768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9AN2:bKOjssTdFMsAX1pA6G0qm1Y8jgFzN

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085N

    • Size

      55KB

    • MD5

      03b5b44f6577ee7c2d5f5cf45b80d1b0

    • SHA1

      3d7601cd48017bf372fd5e8d9301e3defc85fe20

    • SHA256

      6a43a87733f9b0cbede5e6ebacedd6d4284b89fbf694c2729f8c2d72e22ec085

    • SHA512

      b5398eef8c8d0100ac45f244f653fdd3da134159aa6da49c9b9937314c7ca6629a75a3ea9bdee792c1b23d76bb2025b2c970af1b392e26b267c65d65da581f74

    • SSDEEP

      768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9AN2:bKOjssTdFMsAX1pA6G0qm1Y8jgFzN

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks