General

  • Target

    cf520deda8e9445d2dd41e54b9bcdfef0041bae6e43a421d53dc35bf33746502

  • Size

    332KB

  • Sample

    241117-lccc7swkht

  • MD5

    a483e212eee2562eaef4759e146545dd

  • SHA1

    58bf3dc2c9c6bf219429752eecc5b79ffe64599e

  • SHA256

    cf520deda8e9445d2dd41e54b9bcdfef0041bae6e43a421d53dc35bf33746502

  • SHA512

    2c38a5960a8f02785d4a016eb841f8ae3206416bcd1402e043075cd4151260a95363fc19cd63aa8eaa075ffa949ee471d895159119cc6836d2c7dbc233af34b7

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciJ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      cf520deda8e9445d2dd41e54b9bcdfef0041bae6e43a421d53dc35bf33746502

    • Size

      332KB

    • MD5

      a483e212eee2562eaef4759e146545dd

    • SHA1

      58bf3dc2c9c6bf219429752eecc5b79ffe64599e

    • SHA256

      cf520deda8e9445d2dd41e54b9bcdfef0041bae6e43a421d53dc35bf33746502

    • SHA512

      2c38a5960a8f02785d4a016eb841f8ae3206416bcd1402e043075cd4151260a95363fc19cd63aa8eaa075ffa949ee471d895159119cc6836d2c7dbc233af34b7

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY0:vHW138/iXWlK885rKlGSekcj66ciJ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks