General

  • Target

    6d2ccc1f90a3a346e7821353dba28e37083615cbfb182747bd391512191a9f4e

  • Size

    336KB

  • Sample

    250120-egz7hazqcq

  • MD5

    02c93b7e5787309e5449f494b60ff083

  • SHA1

    6facdc23d4875cbfc5d61a615685a1704a05452a

  • SHA256

    6d2ccc1f90a3a346e7821353dba28e37083615cbfb182747bd391512191a9f4e

  • SHA512

    a2a17cab1d187187a1568738db0dc9c534c3869a611298f207a58dc12f122ff4ce7e00f188e6af2612b7aa08172c3cd50dfc6e8463f203b10c035a79e35f8d6a

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKo3:vHW138/iXWlK885rKlGSekcj66ci6

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      6d2ccc1f90a3a346e7821353dba28e37083615cbfb182747bd391512191a9f4e

    • Size

      336KB

    • MD5

      02c93b7e5787309e5449f494b60ff083

    • SHA1

      6facdc23d4875cbfc5d61a615685a1704a05452a

    • SHA256

      6d2ccc1f90a3a346e7821353dba28e37083615cbfb182747bd391512191a9f4e

    • SHA512

      a2a17cab1d187187a1568738db0dc9c534c3869a611298f207a58dc12f122ff4ce7e00f188e6af2612b7aa08172c3cd50dfc6e8463f203b10c035a79e35f8d6a

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKo3:vHW138/iXWlK885rKlGSekcj66ci6

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks