General

  • Target

    34d5ce40def7d232c878159c8a25e0baceb5a7489723531e70902bd3e8e48ea9N

  • Size

    67KB

  • Sample

    241022-pmccqsvcph

  • MD5

    65524ab88e435a88bb3692b10eb0c9f0

  • SHA1

    a91560914f111313baedb09582d4eed20231633a

  • SHA256

    34d5ce40def7d232c878159c8a25e0baceb5a7489723531e70902bd3e8e48ea9

  • SHA512

    8c3e5153b87ad3f6804e22740ff0f06e7bf42710edd9b21ec181aa553e594fac29633e940f4059d8820965fdaddc3d209bdbbcba4a329f617ed426d3aa97deab

  • SSDEEP

    1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOZ:l//AjMp+u2onejH2Peu

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      34d5ce40def7d232c878159c8a25e0baceb5a7489723531e70902bd3e8e48ea9N

    • Size

      67KB

    • MD5

      65524ab88e435a88bb3692b10eb0c9f0

    • SHA1

      a91560914f111313baedb09582d4eed20231633a

    • SHA256

      34d5ce40def7d232c878159c8a25e0baceb5a7489723531e70902bd3e8e48ea9

    • SHA512

      8c3e5153b87ad3f6804e22740ff0f06e7bf42710edd9b21ec181aa553e594fac29633e940f4059d8820965fdaddc3d209bdbbcba4a329f617ed426d3aa97deab

    • SSDEEP

      1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOZ:l//AjMp+u2onejH2Peu

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks