Resubmissions

26-01-2025 03:48

250126-ec5anasnaj 10

26-01-2025 03:44

250126-eal2as1jdz 10

General

  • Target

    bcad497975477a792314eab89093bafcec62925b46d919d34624a3549588c1c9

  • Size

    505KB

  • Sample

    250126-eal2as1jdz

  • MD5

    e8c2d1a78d3f6c19c06a82c8fa661946

  • SHA1

    3dac0a7c3a8b17bb26283fe5e0f1f2547dc161c9

  • SHA256

    bcad497975477a792314eab89093bafcec62925b46d919d34624a3549588c1c9

  • SHA512

    f572a0740c2c823c3768fe89beebba122ecee8f6c036395908a7b37c2b64885ae1bcc8914e66b3eb97763a779463b3797d12d75eb1f9cfbb3cd6b2d4c8ee7ab9

  • SSDEEP

    12288:N/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFO:N/D0caF8wvhb43pDbO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Targets

    • Target

      bcad497975477a792314eab89093bafcec62925b46d919d34624a3549588c1c9

    • Size

      505KB

    • MD5

      e8c2d1a78d3f6c19c06a82c8fa661946

    • SHA1

      3dac0a7c3a8b17bb26283fe5e0f1f2547dc161c9

    • SHA256

      bcad497975477a792314eab89093bafcec62925b46d919d34624a3549588c1c9

    • SHA512

      f572a0740c2c823c3768fe89beebba122ecee8f6c036395908a7b37c2b64885ae1bcc8914e66b3eb97763a779463b3797d12d75eb1f9cfbb3cd6b2d4c8ee7ab9

    • SSDEEP

      12288:N/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFO:N/D0caF8wvhb43pDbO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks