General

  • Target

    36004ca3b9f743497d7bb3789248d7dce817e0bd93b9929061987742ecd71c6c

  • Size

    448KB

  • Sample

    241112-zxz7na1eqg

  • MD5

    e6cdc9ca05f7d0d63b9a2e4547905566

  • SHA1

    65ae2b56ed18ebb0d9454b768a49829d8298d72c

  • SHA256

    36004ca3b9f743497d7bb3789248d7dce817e0bd93b9929061987742ecd71c6c

  • SHA512

    e2a1d3d93c5ba639b3e56d2094f1b3eb84f5506a4ced2383735b28a658b75cf542bae675d21b2ba40bf2e66aa4a96c08fff2f698647998c77cdb7c8d436780a3

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTF:CMpASIcWYx2U6hAJQnw

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      36004ca3b9f743497d7bb3789248d7dce817e0bd93b9929061987742ecd71c6c

    • Size

      448KB

    • MD5

      e6cdc9ca05f7d0d63b9a2e4547905566

    • SHA1

      65ae2b56ed18ebb0d9454b768a49829d8298d72c

    • SHA256

      36004ca3b9f743497d7bb3789248d7dce817e0bd93b9929061987742ecd71c6c

    • SHA512

      e2a1d3d93c5ba639b3e56d2094f1b3eb84f5506a4ced2383735b28a658b75cf542bae675d21b2ba40bf2e66aa4a96c08fff2f698647998c77cdb7c8d436780a3

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTF:CMpASIcWYx2U6hAJQnw

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks