General

  • Target

    29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756

  • Size

    336KB

  • Sample

    250119-2a2s3syraj

  • MD5

    8b5d4040699ab941751630006a22ed61

  • SHA1

    f57aff4ee41ad39e34df68f759c220a55e9bc1d1

  • SHA256

    29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756

  • SHA512

    a7e98068b11c42f6a54a24b315a4aa471b87f6cc402530953a0359cdf40d613467b26cf41952f83dcc8902d203b86542e0731c68e98dbc385d76fa0e90445e76

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcEg:vHW138/iXWlK885rKlGSekcj66cis

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756

    • Size

      336KB

    • MD5

      8b5d4040699ab941751630006a22ed61

    • SHA1

      f57aff4ee41ad39e34df68f759c220a55e9bc1d1

    • SHA256

      29cf49ad638ecc9b68f666d9bb137ecca659c483b06592411e40056c82e7d756

    • SHA512

      a7e98068b11c42f6a54a24b315a4aa471b87f6cc402530953a0359cdf40d613467b26cf41952f83dcc8902d203b86542e0731c68e98dbc385d76fa0e90445e76

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcEg:vHW138/iXWlK885rKlGSekcj66cis

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks