General

  • Target

    f6485af85c764dfdfc7fced0cb1d7cdcb34265e604097ac299744959399857ec

  • Size

    62KB

  • Sample

    241113-ewav6awcqh

  • MD5

    d0cf87996bbfa111dd816d493379290b

  • SHA1

    92664a944204ce43311463b02560c3497e59f239

  • SHA256

    f6485af85c764dfdfc7fced0cb1d7cdcb34265e604097ac299744959399857ec

  • SHA512

    93a3955f145a59657caa7044f28ff6c72d29c20fdb877e2dea3b15b276f7184a1726208e5b1a0667d3e58b47c6c93346ae4fbcc35811845e2e8feac24d3decdf

  • SSDEEP

    1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVF:Jo0cAthu6+FQ0JuPkF

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f6485af85c764dfdfc7fced0cb1d7cdcb34265e604097ac299744959399857ec

    • Size

      62KB

    • MD5

      d0cf87996bbfa111dd816d493379290b

    • SHA1

      92664a944204ce43311463b02560c3497e59f239

    • SHA256

      f6485af85c764dfdfc7fced0cb1d7cdcb34265e604097ac299744959399857ec

    • SHA512

      93a3955f145a59657caa7044f28ff6c72d29c20fdb877e2dea3b15b276f7184a1726208e5b1a0667d3e58b47c6c93346ae4fbcc35811845e2e8feac24d3decdf

    • SSDEEP

      1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVF:Jo0cAthu6+FQ0JuPkF

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks