General

  • Target

    5b7ffb6582b9627f310fb7be22fefb4dea58d1aef30301e981d357ab7126bad4

  • Size

    77KB

  • Sample

    250203-3lrypaxkex

  • MD5

    76becc6084eb6de9a0b38cd7c27c2f43

  • SHA1

    6a984b4adefb8c106c1d09f6d1d27d63c3a6abf6

  • SHA256

    5b7ffb6582b9627f310fb7be22fefb4dea58d1aef30301e981d357ab7126bad4

  • SHA512

    b72cb997754bae1ce88493e5bc9afcc57f62dd9731c85cd0bf7976ff16ecc9fe7b3b3dc58042f380ef4fc1546a155e78764499158cf7883e093db4344d481c4a

  • SSDEEP

    1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1+:PLnFYZx7CeCEwrV

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      5b7ffb6582b9627f310fb7be22fefb4dea58d1aef30301e981d357ab7126bad4

    • Size

      77KB

    • MD5

      76becc6084eb6de9a0b38cd7c27c2f43

    • SHA1

      6a984b4adefb8c106c1d09f6d1d27d63c3a6abf6

    • SHA256

      5b7ffb6582b9627f310fb7be22fefb4dea58d1aef30301e981d357ab7126bad4

    • SHA512

      b72cb997754bae1ce88493e5bc9afcc57f62dd9731c85cd0bf7976ff16ecc9fe7b3b3dc58042f380ef4fc1546a155e78764499158cf7883e093db4344d481c4a

    • SSDEEP

      1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1+:PLnFYZx7CeCEwrV

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks