General

  • Target

    be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81

  • Size

    51KB

  • Sample

    241120-dn1aeazfnq

  • MD5

    8b92e2fbfc42d62f866f80d50e31bd08

  • SHA1

    48fda0fafde62c48c1f26bcc5e0bf2df15980cc4

  • SHA256

    be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81

  • SHA512

    d4aa82694a5f076d56ac0d70495176e175086d00f7ef4ad022c52c1a378d4896eec1f588b62345a443e17aaa7ae899c1ea06e14ce5a17ad11ff01f37e892f05e

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPyj:KsdXfBo/DBJBGzkP5Pyj

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81

    • Size

      51KB

    • MD5

      8b92e2fbfc42d62f866f80d50e31bd08

    • SHA1

      48fda0fafde62c48c1f26bcc5e0bf2df15980cc4

    • SHA256

      be097d755dc5d6a722a4182c1e16f9f3613f530ee90021ce54fdb89015b8bb81

    • SHA512

      d4aa82694a5f076d56ac0d70495176e175086d00f7ef4ad022c52c1a378d4896eec1f588b62345a443e17aaa7ae899c1ea06e14ce5a17ad11ff01f37e892f05e

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPyj:KsdXfBo/DBJBGzkP5Pyj

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks