General

  • Target

    ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173

  • Size

    77KB

  • Sample

    250125-fd2rlawnhx

  • MD5

    5f7079f7d1929930a355dd4f26f0bcb1

  • SHA1

    e8c4c77c47d3cf184b85ebb8e3f2870d2a932667

  • SHA256

    ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173

  • SHA512

    9df88674e32ac33e325e5ec6d7a578566d2041c9e2fb2a439abf4a43a18dff45f6bf9c04805344f6b0dff24dfda11a6110d95310154a08b2bd06aef336983493

  • SSDEEP

    1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1p:PLnFYZx7CeCEwre

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173

    • Size

      77KB

    • MD5

      5f7079f7d1929930a355dd4f26f0bcb1

    • SHA1

      e8c4c77c47d3cf184b85ebb8e3f2870d2a932667

    • SHA256

      ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173

    • SHA512

      9df88674e32ac33e325e5ec6d7a578566d2041c9e2fb2a439abf4a43a18dff45f6bf9c04805344f6b0dff24dfda11a6110d95310154a08b2bd06aef336983493

    • SSDEEP

      1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1p:PLnFYZx7CeCEwre

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks