General

  • Target

    7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586

  • Size

    52KB

  • Sample

    250124-cqeaaavkft

  • MD5

    8db76057a1f87b8e1f6c3c7440c9a5dc

  • SHA1

    f18705ca70c159e89fee756b5f06ee9fec06ff87

  • SHA256

    7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586

  • SHA512

    f03cc6855bf36647f33e95d3850a3f9e12fe5017f3812fcf5ba40b5216b2e3188590afdd15aa245d2165c00d1ddb29c6321cc00dbe990de02ffe6ae62878a1d0

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCB:KsdXfBo/DBJBGzkP5PCB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586

    • Size

      52KB

    • MD5

      8db76057a1f87b8e1f6c3c7440c9a5dc

    • SHA1

      f18705ca70c159e89fee756b5f06ee9fec06ff87

    • SHA256

      7143351ed1b5ea93ab51df0efc9d8782cb96d0f4bd02044bc049cf31bceb6586

    • SHA512

      f03cc6855bf36647f33e95d3850a3f9e12fe5017f3812fcf5ba40b5216b2e3188590afdd15aa245d2165c00d1ddb29c6321cc00dbe990de02ffe6ae62878a1d0

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCB:KsdXfBo/DBJBGzkP5PCB

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks