General

  • Target

    0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0

  • Size

    163KB

  • Sample

    241116-p86hpsxbqa

  • MD5

    2fee79023c3db490f67b3f9cb46f0975

  • SHA1

    ae591dbecd98f7f692cf31c37af3c302971e4e97

  • SHA256

    0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0

  • SHA512

    eebb0c3155bf84a97ab82c0c47c91af99c2a53390036f3945d75d84410719c94a6db5181c4dafe38743d7cb09042a7c9467e51d7bc0fb59690bc5b1ef21078a9

  • SSDEEP

    1536:GRwT8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjpZWoI23A4tHP:APuk8QsH47nW5ppsoI23A4B

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0

    • Size

      163KB

    • MD5

      2fee79023c3db490f67b3f9cb46f0975

    • SHA1

      ae591dbecd98f7f692cf31c37af3c302971e4e97

    • SHA256

      0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0

    • SHA512

      eebb0c3155bf84a97ab82c0c47c91af99c2a53390036f3945d75d84410719c94a6db5181c4dafe38743d7cb09042a7c9467e51d7bc0fb59690bc5b1ef21078a9

    • SSDEEP

      1536:GRwT8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjpZWoI23A4tHP:APuk8QsH47nW5ppsoI23A4B

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks