General

  • Target

    f3482ab9b6e8995b293b257daeab8ed9ba166bf50d19138027914aba5793b903.exe

  • Size

    55KB

  • Sample

    241216-2ssm5atkgr

  • MD5

    5f50787c8bc59414d049988b34a328c6

  • SHA1

    af17cfbd8a4ac2f83a11f66b85b91d8690b536f6

  • SHA256

    f3482ab9b6e8995b293b257daeab8ed9ba166bf50d19138027914aba5793b903

  • SHA512

    2ad0008a7ce4525aac9c30ef37b971dd5620bee4915fd14cfac71375c427d488a6ed054cf1f2c50b190e187316f69c00a734b37029db83a30e819d267e19c8ec

  • SSDEEP

    768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANY:bKOjssTdFMsAX1pA6G0qm1Y8jgFzx

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f3482ab9b6e8995b293b257daeab8ed9ba166bf50d19138027914aba5793b903.exe

    • Size

      55KB

    • MD5

      5f50787c8bc59414d049988b34a328c6

    • SHA1

      af17cfbd8a4ac2f83a11f66b85b91d8690b536f6

    • SHA256

      f3482ab9b6e8995b293b257daeab8ed9ba166bf50d19138027914aba5793b903

    • SHA512

      2ad0008a7ce4525aac9c30ef37b971dd5620bee4915fd14cfac71375c427d488a6ed054cf1f2c50b190e187316f69c00a734b37029db83a30e819d267e19c8ec

    • SSDEEP

      768:egjKOwfkQsxi4CUWsFZzdXCHuWFpuQlBVQayBAFp1pAK4gpuK1cnPdFmfbpA9ANY:bKOjssTdFMsAX1pA6G0qm1Y8jgFzx

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks