General

  • Target

    b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341

  • Size

    333KB

  • Sample

    241118-exw5satkcn

  • MD5

    7c52fa1dc9e1c5e59b28723dfab0a5b6

  • SHA1

    90838f4318a86b255e60c6d6d44faabcf7a3e254

  • SHA256

    b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341

  • SHA512

    52110668c323a0e6fb653f7aa17c28ad5fa4f30bf6cba9e582f89b1ad4004b8596d4bc534b52c3f31b530298878caf01342c5979ea4edcb5f8d96b5a98805d52

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYiU:vHW138/iXWlK885rKlGSekcj66ci/U

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341

    • Size

      333KB

    • MD5

      7c52fa1dc9e1c5e59b28723dfab0a5b6

    • SHA1

      90838f4318a86b255e60c6d6d44faabcf7a3e254

    • SHA256

      b9a4ef2e93da2c76fdf66f0054078c993adb4aba091449213f95920f7760d341

    • SHA512

      52110668c323a0e6fb653f7aa17c28ad5fa4f30bf6cba9e582f89b1ad4004b8596d4bc534b52c3f31b530298878caf01342c5979ea4edcb5f8d96b5a98805d52

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYiU:vHW138/iXWlK885rKlGSekcj66ci/U

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks