General

  • Target

    50a89c6d09b129e936486d29ee7da280bd34ca219716b317f7554586eda2a85b

  • Size

    54KB

  • Sample

    250203-21t6xswpct

  • MD5

    35605fce42ab949480d32a0623876365

  • SHA1

    81bb1c6d758b5af9936bcc6cffb6ade05353f388

  • SHA256

    50a89c6d09b129e936486d29ee7da280bd34ca219716b317f7554586eda2a85b

  • SHA512

    3060b79b6d06dde8a60c1cd3899ed8d875a59adc6da5658bb1da96cd8e7128d0865a077568fff6e1e59b29dd5e9211ba24389503d485cfff6f27007abfb1631e

  • SSDEEP

    1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgs:vMhAe5Zs091KI+JYixw49XjrP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      50a89c6d09b129e936486d29ee7da280bd34ca219716b317f7554586eda2a85b

    • Size

      54KB

    • MD5

      35605fce42ab949480d32a0623876365

    • SHA1

      81bb1c6d758b5af9936bcc6cffb6ade05353f388

    • SHA256

      50a89c6d09b129e936486d29ee7da280bd34ca219716b317f7554586eda2a85b

    • SHA512

      3060b79b6d06dde8a60c1cd3899ed8d875a59adc6da5658bb1da96cd8e7128d0865a077568fff6e1e59b29dd5e9211ba24389503d485cfff6f27007abfb1631e

    • SSDEEP

      1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgs:vMhAe5Zs091KI+JYixw49XjrP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks