General

  • Target

    4075af41ee875cd5516543255c2bba7406652ccea2b4bae93802f8c95b9f2f9f

  • Size

    55KB

  • Sample

    241115-1af1yasfkc

  • MD5

    b31e33f18a671f6dcb661de3eb5da035

  • SHA1

    6ce0726df71be8885e0918045787410d127b51de

  • SHA256

    4075af41ee875cd5516543255c2bba7406652ccea2b4bae93802f8c95b9f2f9f

  • SHA512

    f70b364a6ef8b7b0ad56e0158e05c9b27d30ff3f9e433a621888a6aa17cd6fa21ec348b9c6361149925c3b481edcc5d63e182ee28e44349efa67299dadef2d4d

  • SSDEEP

    1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT76:qwda7KVr0cHneunw16

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      4075af41ee875cd5516543255c2bba7406652ccea2b4bae93802f8c95b9f2f9f

    • Size

      55KB

    • MD5

      b31e33f18a671f6dcb661de3eb5da035

    • SHA1

      6ce0726df71be8885e0918045787410d127b51de

    • SHA256

      4075af41ee875cd5516543255c2bba7406652ccea2b4bae93802f8c95b9f2f9f

    • SHA512

      f70b364a6ef8b7b0ad56e0158e05c9b27d30ff3f9e433a621888a6aa17cd6fa21ec348b9c6361149925c3b481edcc5d63e182ee28e44349efa67299dadef2d4d

    • SSDEEP

      1536:qw788avzI+on+TqOK0cHMqtzMLvWsrupwnTf1GqT76:qwda7KVr0cHneunw16

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks