General

  • Target

    7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d

  • Size

    336KB

  • Sample

    250120-fqr3xssqhn

  • MD5

    7ec7de4e9a57cb8de75c702a35e702c6

  • SHA1

    634f1f6c6db3418043a31b99f935e5443f3cef2d

  • SHA256

    7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d

  • SHA512

    386b747b5cbe93e99a2aeefff6bb47496d771da1c9998872ebbcf243cb9ffd604051860f2426d866f461af243fc2cd74c57a37b512307a800c1f5e121df0517a

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoZ:vHW138/iXWlK885rKlGSekcj66ciU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d

    • Size

      336KB

    • MD5

      7ec7de4e9a57cb8de75c702a35e702c6

    • SHA1

      634f1f6c6db3418043a31b99f935e5443f3cef2d

    • SHA256

      7a59610bcc3e1c589ce52cd897f831edb773a663b45580caf0ecffc1ee83967d

    • SHA512

      386b747b5cbe93e99a2aeefff6bb47496d771da1c9998872ebbcf243cb9ffd604051860f2426d866f461af243fc2cd74c57a37b512307a800c1f5e121df0517a

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKoZ:vHW138/iXWlK885rKlGSekcj66ciU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks