General

  • Target

    d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec

  • Size

    326KB

  • Sample

    241124-d3rxksyjbp

  • MD5

    04789a3f25b4f7543879d1a38938613e

  • SHA1

    00b2cc1c3643cf1c6fcfaa87152fb1205635f740

  • SHA256

    d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec

  • SHA512

    4cc6d593494cb9670763942b337a254c5aa7be4c078efbabdb12f6fabc8c95de8f4c11703811d4428c7a40e75b783ed6a82fb2fcc284aab116c03c28dd8c642d

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYa:vHW138/iXWlK885rKlGSekcj66cin

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec

    • Size

      326KB

    • MD5

      04789a3f25b4f7543879d1a38938613e

    • SHA1

      00b2cc1c3643cf1c6fcfaa87152fb1205635f740

    • SHA256

      d028bd4a520514fc50953f54f9a49a24b41370dd56deafc3981321548204cbec

    • SHA512

      4cc6d593494cb9670763942b337a254c5aa7be4c078efbabdb12f6fabc8c95de8f4c11703811d4428c7a40e75b783ed6a82fb2fcc284aab116c03c28dd8c642d

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYa:vHW138/iXWlK885rKlGSekcj66cin

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks