General

  • Target

    5a662aa053778f05eb91432197fc0331dc0a887bfa4a8bb2d2534cad217d4f8d

  • Size

    94KB

  • Sample

    250118-cjmcbazqcl

  • MD5

    a902aed6f605f8095c90b0a944ea6ee5

  • SHA1

    d83d3b1b6169ab42b3676ab0bd3ece3608a8b9a3

  • SHA256

    5a662aa053778f05eb91432197fc0331dc0a887bfa4a8bb2d2534cad217d4f8d

  • SHA512

    2067dfd375897841f2202dca2e1b43df9109aca0c7429830479e0f3e91dee96dd232ce286fc97ccbd9f9953c148ed5fec7992287a81ad2ef99c3a7afde992aa0

  • SSDEEP

    768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mG:tWzhtJbUgHoADDIx1hLfuJrG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      5a662aa053778f05eb91432197fc0331dc0a887bfa4a8bb2d2534cad217d4f8d

    • Size

      94KB

    • MD5

      a902aed6f605f8095c90b0a944ea6ee5

    • SHA1

      d83d3b1b6169ab42b3676ab0bd3ece3608a8b9a3

    • SHA256

      5a662aa053778f05eb91432197fc0331dc0a887bfa4a8bb2d2534cad217d4f8d

    • SHA512

      2067dfd375897841f2202dca2e1b43df9109aca0c7429830479e0f3e91dee96dd232ce286fc97ccbd9f9953c148ed5fec7992287a81ad2ef99c3a7afde992aa0

    • SSDEEP

      768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mG:tWzhtJbUgHoADDIx1hLfuJrG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks