General

  • Target

    8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178

  • Size

    138KB

  • Sample

    250119-ehbkjavrgr

  • MD5

    cb8e65a5e75981aa5da1ab661821ee88

  • SHA1

    e1334456b7bef3ebe043591dccecc0dfb41058f3

  • SHA256

    8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178

  • SHA512

    a4307b8d867beee1a0502f4bf51e14c97e98e2f36a9811b37c40269735cafac1a23c065a3ac8fa84fd80df4c538fa83a73a4fb91b720fc03961623d6d081d673

  • SSDEEP

    3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GU:VUhAOOt84Rh9KEi2U

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178

    • Size

      138KB

    • MD5

      cb8e65a5e75981aa5da1ab661821ee88

    • SHA1

      e1334456b7bef3ebe043591dccecc0dfb41058f3

    • SHA256

      8221a4675d4839366cc13426056950a2742201f1da65cb7f8729d5017a16d178

    • SHA512

      a4307b8d867beee1a0502f4bf51e14c97e98e2f36a9811b37c40269735cafac1a23c065a3ac8fa84fd80df4c538fa83a73a4fb91b720fc03961623d6d081d673

    • SSDEEP

      3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GU:VUhAOOt84Rh9KEi2U

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks