General

  • Target

    c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b

  • Size

    333KB

  • Sample

    241118-fev1faydqg

  • MD5

    1451a4312a14a1ac2cfa72abc1c76b74

  • SHA1

    e0a59172e30587cf9bbef9f917f8bb3735dbb901

  • SHA256

    c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b

  • SHA512

    2f1c8bb8b61241860dd820f43aa79f59ca700c08014d0be9dcc7a17b121e849fade8460a7d6b0cf1f8ee98b0f0efcd18226746995c8bd18d549bfa9b5c1387d3

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66cii

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b

    • Size

      333KB

    • MD5

      1451a4312a14a1ac2cfa72abc1c76b74

    • SHA1

      e0a59172e30587cf9bbef9f917f8bb3735dbb901

    • SHA256

      c3b764212020bc5880a8c35fe63d09f56e974af94ddfd8dd5e4cb373892b182b

    • SHA512

      2f1c8bb8b61241860dd820f43aa79f59ca700c08014d0be9dcc7a17b121e849fade8460a7d6b0cf1f8ee98b0f0efcd18226746995c8bd18d549bfa9b5c1387d3

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYX:vHW138/iXWlK885rKlGSekcj66cii

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks