General

  • Target

    301e38120286267ed71a8175065b1cff3f1df9048c59652c92b6b2d79de11639

  • Size

    264KB

  • Sample

    241115-zn13lasbnd

  • MD5

    abc7cb63854dab672d08bcba8d1ff1a1

  • SHA1

    0bedddabde7163fa55e5d3872e2095dc60a69e16

  • SHA256

    301e38120286267ed71a8175065b1cff3f1df9048c59652c92b6b2d79de11639

  • SHA512

    db34773cee8094f5d8b44b41ce81aa86b3c41845c34d3ee7221470f79a44eb6960dd95fd06c4cc4872fa265563bf2d148c3a362e1d92e86e86f90394e006a472

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANak:ASeyGpTaesaQUufkL57YsL9NIx9ANak

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      301e38120286267ed71a8175065b1cff3f1df9048c59652c92b6b2d79de11639

    • Size

      264KB

    • MD5

      abc7cb63854dab672d08bcba8d1ff1a1

    • SHA1

      0bedddabde7163fa55e5d3872e2095dc60a69e16

    • SHA256

      301e38120286267ed71a8175065b1cff3f1df9048c59652c92b6b2d79de11639

    • SHA512

      db34773cee8094f5d8b44b41ce81aa86b3c41845c34d3ee7221470f79a44eb6960dd95fd06c4cc4872fa265563bf2d148c3a362e1d92e86e86f90394e006a472

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANak:ASeyGpTaesaQUufkL57YsL9NIx9ANak

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks