General

  • Target

    11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30

  • Size

    80KB

  • Sample

    241124-ykmkcswnas

  • MD5

    3872236fecc58e4f8e40db5ec0b326b2

  • SHA1

    519a4ec4bfd71b64be54f46fa1cbc5bf071185e0

  • SHA256

    11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30

  • SHA512

    c7ef565beaffbc46aca30ff2962aaddafce4de0f001439bf2a4800dfabe618ccc29a35b62cee44958dc05988de088eada88da70a7c8ea9db3d7381555945b9a4

  • SSDEEP

    1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8teLx:4lnhYPlVMqmyAFIRR+x

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30

    • Size

      80KB

    • MD5

      3872236fecc58e4f8e40db5ec0b326b2

    • SHA1

      519a4ec4bfd71b64be54f46fa1cbc5bf071185e0

    • SHA256

      11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30

    • SHA512

      c7ef565beaffbc46aca30ff2962aaddafce4de0f001439bf2a4800dfabe618ccc29a35b62cee44958dc05988de088eada88da70a7c8ea9db3d7381555945b9a4

    • SSDEEP

      1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8teLx:4lnhYPlVMqmyAFIRR+x

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks