General

  • Target

    a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff

  • Size

    58KB

  • Sample

    250118-hzm7fawnds

  • MD5

    65cd9e85d0e2ab0347379aa7c18c3c9a

  • SHA1

    a5150729b372d037a52fc3e7c4c30ffdd6747f26

  • SHA256

    a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff

  • SHA512

    9df8eaa6b29d9ada94f2667a0f73bb956e9118ca00fb21670bba257cee2de34059346dfd3fecd147fbfe72fceec2a8ae35827e096da800fd17dc51b1ed21b16a

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8NT:MOemdTd1o74qlmbbJ+x+Ikb

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff

    • Size

      58KB

    • MD5

      65cd9e85d0e2ab0347379aa7c18c3c9a

    • SHA1

      a5150729b372d037a52fc3e7c4c30ffdd6747f26

    • SHA256

      a0985dbdf194333943cce036e8da51c0bba1279706db7a6027a8dce00d08cdff

    • SHA512

      9df8eaa6b29d9ada94f2667a0f73bb956e9118ca00fb21670bba257cee2de34059346dfd3fecd147fbfe72fceec2a8ae35827e096da800fd17dc51b1ed21b16a

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8NT:MOemdTd1o74qlmbbJ+x+Ikb

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks