General

  • Target

    514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254

  • Size

    51KB

  • Sample

    241115-1x1c4awrfm

  • MD5

    57b846a6a331f151b127fe0c4a3a90f6

  • SHA1

    33e3caedd0a30c5085446f5d38527caca05d8a16

  • SHA256

    514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254

  • SHA512

    af56559ddc4b887cd34039008e443d24d023e28e8e18596e9900a030fd7953c3e516cead58527280f120dbc9375435a7a2459c46f1dfd5776a5fd29c65d8bc6d

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP5:KsdXfBo/DBJBGzkP5P5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254

    • Size

      51KB

    • MD5

      57b846a6a331f151b127fe0c4a3a90f6

    • SHA1

      33e3caedd0a30c5085446f5d38527caca05d8a16

    • SHA256

      514cb875496dcf6bc5e35a95a11993a6cc951d3dcc123b284a9457d22c410254

    • SHA512

      af56559ddc4b887cd34039008e443d24d023e28e8e18596e9900a030fd7953c3e516cead58527280f120dbc9375435a7a2459c46f1dfd5776a5fd29c65d8bc6d

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhP5:KsdXfBo/DBJBGzkP5P5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks