General

  • Target

    2bca31dbe6ea2506dedacf67e85ade3d1f0676b42805168c6aa415ec3d32eb7f

  • Size

    60KB

  • Sample

    241122-zssa9aypay

  • MD5

    3f979d588b61caf650a831b6a7121277

  • SHA1

    52593a24343bd74093ec3ca8570296d48f64d0b0

  • SHA256

    2bca31dbe6ea2506dedacf67e85ade3d1f0676b42805168c6aa415ec3d32eb7f

  • SHA512

    a4c9acfba4f6583fc4df2c9e39813ec93acf0aacbe3b8f51d869389b431d2d817415f04048b23ee457050a7deccc985b3ebb5f53c50673f489adbfe28f8d1cae

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP4:nK0GjMeQG3iaQREuVZ6ro29p4YxbKda8

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      2bca31dbe6ea2506dedacf67e85ade3d1f0676b42805168c6aa415ec3d32eb7f

    • Size

      60KB

    • MD5

      3f979d588b61caf650a831b6a7121277

    • SHA1

      52593a24343bd74093ec3ca8570296d48f64d0b0

    • SHA256

      2bca31dbe6ea2506dedacf67e85ade3d1f0676b42805168c6aa415ec3d32eb7f

    • SHA512

      a4c9acfba4f6583fc4df2c9e39813ec93acf0aacbe3b8f51d869389b431d2d817415f04048b23ee457050a7deccc985b3ebb5f53c50673f489adbfe28f8d1cae

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP4:nK0GjMeQG3iaQREuVZ6ro29p4YxbKda8

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks