General

  • Target

    c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f

  • Size

    77KB

  • Sample

    250118-lmma6azkfw

  • MD5

    3111f9fd6eba6b81f2b694d4bc429ef9

  • SHA1

    4c507d0e044b5e2ef1789c84103249a80d1397f6

  • SHA256

    c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f

  • SHA512

    00f517dc8f922fc4553f6ddacc8a6d3abee0271780739c19756ead94b11b3edfc1d4e03e4c0ef92358827d6f53c8106ae10f015be9c056af20be6ecc1e22a48f

  • SSDEEP

    1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf5:1Dcpl1mrE+EeBJfB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f

    • Size

      77KB

    • MD5

      3111f9fd6eba6b81f2b694d4bc429ef9

    • SHA1

      4c507d0e044b5e2ef1789c84103249a80d1397f6

    • SHA256

      c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f

    • SHA512

      00f517dc8f922fc4553f6ddacc8a6d3abee0271780739c19756ead94b11b3edfc1d4e03e4c0ef92358827d6f53c8106ae10f015be9c056af20be6ecc1e22a48f

    • SSDEEP

      1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf5:1Dcpl1mrE+EeBJfB

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks