General

  • Target

    21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9

  • Size

    57KB

  • Sample

    241207-zelxbasmft

  • MD5

    96ccbbccea90a36ee09c09f3af7710ea

  • SHA1

    ce46d83f05332539ae28be08679c6d289d79fa2e

  • SHA256

    21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9

  • SHA512

    af50be52ad620b68e81155ac5dc5bcc609e1dd99a0b790db5436eef722371b23bb53c9f15c72ed92e83307b1624efe529863dcfbc33cd4bf21299646d85017aa

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8/:MOemdTd1o74qlmbbJ+x+Ikd

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9

    • Size

      57KB

    • MD5

      96ccbbccea90a36ee09c09f3af7710ea

    • SHA1

      ce46d83f05332539ae28be08679c6d289d79fa2e

    • SHA256

      21480ffe56f5460fbacedb9be1b3eca99187508c84472c80399da4ba71c47ad9

    • SHA512

      af50be52ad620b68e81155ac5dc5bcc609e1dd99a0b790db5436eef722371b23bb53c9f15c72ed92e83307b1624efe529863dcfbc33cd4bf21299646d85017aa

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8/:MOemdTd1o74qlmbbJ+x+Ikd

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks