General

  • Target

    6818d46f3f792d723180c9904c4b8ba602beaae6c99884ed78362a4718552a83

  • Size

    411KB

  • Sample

    250118-df7dra1ngn

  • MD5

    90f7645067bab47bfb263db2a1ad0591

  • SHA1

    82f633efbe797f07647e0fd81e8dd73df9f2dd65

  • SHA256

    6818d46f3f792d723180c9904c4b8ba602beaae6c99884ed78362a4718552a83

  • SHA512

    1a16c4f4191d3a736e571302a1e003eef19bc82b2b325942c1fd887ffb77d5775a2d72b577403a4018664f38e55ef10bcf365d186ee0f520d9a2508aeccae757

  • SSDEEP

    6144:bS5XDCmayv02xs7PCt43A7qFqYeAbU9CIxxqbFG9hTRzBSAyiwi/BEku0R72Wqgi:sZmC63nFNerrbqg/N0Di/U0lqgZLo1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      6818d46f3f792d723180c9904c4b8ba602beaae6c99884ed78362a4718552a83

    • Size

      411KB

    • MD5

      90f7645067bab47bfb263db2a1ad0591

    • SHA1

      82f633efbe797f07647e0fd81e8dd73df9f2dd65

    • SHA256

      6818d46f3f792d723180c9904c4b8ba602beaae6c99884ed78362a4718552a83

    • SHA512

      1a16c4f4191d3a736e571302a1e003eef19bc82b2b325942c1fd887ffb77d5775a2d72b577403a4018664f38e55ef10bcf365d186ee0f520d9a2508aeccae757

    • SSDEEP

      6144:bS5XDCmayv02xs7PCt43A7qFqYeAbU9CIxxqbFG9hTRzBSAyiwi/BEku0R72Wqgi:sZmC63nFNerrbqg/N0Di/U0lqgZLo1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks