General

  • Target

    054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522

  • Size

    506KB

  • Sample

    250118-xzvzlssnhn

  • MD5

    abebef90eeaca5e12766b4b318c379a2

  • SHA1

    614d5dbf8251213c64072690449fb18b91e2cf52

  • SHA256

    054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522

  • SHA512

    da2da22f747c00f0e6d6c2cb9f604576455ae7c6be72010b51d8400d2702a05eb08f1499f0231c6ea0d557b54557bd8178e948abd381a162219d0dc30c65d1f3

  • SSDEEP

    12288:ndBNKTCqqwXCcdgT89+MvA+BisqYpxHtp:nLjQC+fs0j

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522

    • Size

      506KB

    • MD5

      abebef90eeaca5e12766b4b318c379a2

    • SHA1

      614d5dbf8251213c64072690449fb18b91e2cf52

    • SHA256

      054783035cbfa181bdaf3da8fb9cc69704662dedad83519fe111d102440cc522

    • SHA512

      da2da22f747c00f0e6d6c2cb9f604576455ae7c6be72010b51d8400d2702a05eb08f1499f0231c6ea0d557b54557bd8178e948abd381a162219d0dc30c65d1f3

    • SSDEEP

      12288:ndBNKTCqqwXCcdgT89+MvA+BisqYpxHtp:nLjQC+fs0j

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks