General

  • Target

    3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b

  • Size

    332KB

  • Sample

    241119-z8b9zaxqdp

  • MD5

    0c532605bd6041f0da53a6a9ade4ccc1

  • SHA1

    b94d3dd6f45d0553004adc2672ce539f4ea8d613

  • SHA256

    3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b

  • SHA512

    2019433e7f79bac22372cf967745ee5113a19507a523f48cc896e6ca4a769702f448770e11bef8656a9485038bf41eb72c25b203d1897ebc6a128fa0c72f6d87

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY+:vHW138/iXWlK885rKlGSekcj66ciL

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b

    • Size

      332KB

    • MD5

      0c532605bd6041f0da53a6a9ade4ccc1

    • SHA1

      b94d3dd6f45d0553004adc2672ce539f4ea8d613

    • SHA256

      3992c40a3facb1621e3289a8f27de223643c750846bc3df81b9bed3c8312116b

    • SHA512

      2019433e7f79bac22372cf967745ee5113a19507a523f48cc896e6ca4a769702f448770e11bef8656a9485038bf41eb72c25b203d1897ebc6a128fa0c72f6d87

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY+:vHW138/iXWlK885rKlGSekcj66ciL

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks