General

  • Target

    7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a

  • Size

    51KB

  • Sample

    241220-bz272awpcr

  • MD5

    60c8ab1f09da41f400a3e80262db7bfb

  • SHA1

    35a99f02310029a6680dbaf2d3604a15148b33a3

  • SHA256

    7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a

  • SHA512

    ce404af2ff34d29154ab301e3b72080ca4ccbca199e60fa9eaae4ce1d75dd1da2fc91040182acb4a2a23cdbe4bf41b40bad4fe32e44ed49e215029f598b541e8

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPi:KsdXfBo/DBJBGzkP5Pi

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a

    • Size

      51KB

    • MD5

      60c8ab1f09da41f400a3e80262db7bfb

    • SHA1

      35a99f02310029a6680dbaf2d3604a15148b33a3

    • SHA256

      7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a

    • SHA512

      ce404af2ff34d29154ab301e3b72080ca4ccbca199e60fa9eaae4ce1d75dd1da2fc91040182acb4a2a23cdbe4bf41b40bad4fe32e44ed49e215029f598b541e8

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPi:KsdXfBo/DBJBGzkP5Pi

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks