General

  • Target

    afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b

  • Size

    73KB

  • Sample

    241113-b175nstldt

  • MD5

    e42775cac1beb83c84030665aa63bcae

  • SHA1

    428432076c1be3fee33a689b57c8d43a7e91ad56

  • SHA256

    afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b

  • SHA512

    fb6d0f1d48e26ae0305b7bf89d81146ec74fde5207a0b8c1efdaddb042949efaddf0f421f04a24c2a6a5ceb649551cc34661ee159e1d98ede74013e31b480050

  • SSDEEP

    1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHu:Tk8yn7KdmTINQXzz44

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b

    • Size

      73KB

    • MD5

      e42775cac1beb83c84030665aa63bcae

    • SHA1

      428432076c1be3fee33a689b57c8d43a7e91ad56

    • SHA256

      afc4bb4b46c0f16e0b7ed4cc621bcb57c3b7b25deb3d5aab5a8b9f8b10ba9f8b

    • SHA512

      fb6d0f1d48e26ae0305b7bf89d81146ec74fde5207a0b8c1efdaddb042949efaddf0f421f04a24c2a6a5ceb649551cc34661ee159e1d98ede74013e31b480050

    • SSDEEP

      1536:+Uk8RgDXz7Kx8zzgmTlvtKrNCpbXmsz4tHu:Tk8yn7KdmTINQXzz44

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks