General

  • Target

    b53de48b02bfadff3aaa231d487b4f2cb63531e6e334c1bbbde2243c738f86e7

  • Size

    92KB

  • Sample

    250108-hqcz4s1mhn

  • MD5

    428a488ede5698243aea8a7ed07c7978

  • SHA1

    2615af6a3333703eebcb29894345cc84088d0211

  • SHA256

    b53de48b02bfadff3aaa231d487b4f2cb63531e6e334c1bbbde2243c738f86e7

  • SHA512

    a4f1bebdb854125f10d89d80392c162f6d80a9d5d2f751cee99cf7b0091fd0888de16783edc88c3e52e39032f0f97a2089c6728e8754c9c7a9c5aa184a8b47ab

  • SSDEEP

    1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdBq:iDJj29G4gItR7n1qn4Ldw

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      b53de48b02bfadff3aaa231d487b4f2cb63531e6e334c1bbbde2243c738f86e7

    • Size

      92KB

    • MD5

      428a488ede5698243aea8a7ed07c7978

    • SHA1

      2615af6a3333703eebcb29894345cc84088d0211

    • SHA256

      b53de48b02bfadff3aaa231d487b4f2cb63531e6e334c1bbbde2243c738f86e7

    • SHA512

      a4f1bebdb854125f10d89d80392c162f6d80a9d5d2f751cee99cf7b0091fd0888de16783edc88c3e52e39032f0f97a2089c6728e8754c9c7a9c5aa184a8b47ab

    • SSDEEP

      1536:iDJj/L6UWX/iDdolO4g033dsA2+n1qn1iLdBq:iDJj29G4gItR7n1qn4Ldw

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks