General

  • Target

    716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c

  • Size

    508KB

  • Sample

    241122-3yvkcaylgj

  • MD5

    9c5fb0c62ec811e3ee09c3c038c3f4a2

  • SHA1

    965460b96e0039bab84553fc48a86dcc9530a827

  • SHA256

    716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c

  • SHA512

    f367dc4f03ea54a0d5ff87ddade90a6c8b0e6e07c73d7c775c67221869a40a823e3edb3d66ecfdb7f4f4ceec3c96a310304ef07b03c53b72a4f1fd05822aa55d

  • SSDEEP

    12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoo:3MUv2LAv9AQ1p4dKJ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c

    • Size

      508KB

    • MD5

      9c5fb0c62ec811e3ee09c3c038c3f4a2

    • SHA1

      965460b96e0039bab84553fc48a86dcc9530a827

    • SHA256

      716a1ae7074f71915ea6c547cc890fa82838d24b11fc7e1778a78298d00b272c

    • SHA512

      f367dc4f03ea54a0d5ff87ddade90a6c8b0e6e07c73d7c775c67221869a40a823e3edb3d66ecfdb7f4f4ceec3c96a310304ef07b03c53b72a4f1fd05822aa55d

    • SSDEEP

      12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoo:3MUv2LAv9AQ1p4dKJ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks