General

  • Target

    0072655cd7ca56d78914ce2de7bd27c3_JaffaCakes118

  • Size

    543KB

  • Sample

    240328-janbksdb47

  • MD5

    0072655cd7ca56d78914ce2de7bd27c3

  • SHA1

    9ee5d6ad5dd2be7b41db94f49d1025c81628fb9f

  • SHA256

    350e1b5117e6479da1de28c1e6b280830df1481543f9206cd49dc9706e9cfd6a

  • SHA512

    5811842a90f22a9f8a453938fef8a6f9a8774052f38f5cea169135adbe82346b1f72282b19d3a7e6d1b5652b5eb03b539151ed201dbfe086eb89053d70152e56

  • SSDEEP

    12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxuR:92SLi70T7Mifj2

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Targets

    • Target

      0072655cd7ca56d78914ce2de7bd27c3_JaffaCakes118

    • Size

      543KB

    • MD5

      0072655cd7ca56d78914ce2de7bd27c3

    • SHA1

      9ee5d6ad5dd2be7b41db94f49d1025c81628fb9f

    • SHA256

      350e1b5117e6479da1de28c1e6b280830df1481543f9206cd49dc9706e9cfd6a

    • SHA512

      5811842a90f22a9f8a453938fef8a6f9a8774052f38f5cea169135adbe82346b1f72282b19d3a7e6d1b5652b5eb03b539151ed201dbfe086eb89053d70152e56

    • SSDEEP

      12288:T52PxDgZo3ijnieactYDG7MzZSHJcvEj8dmoSxuR:92SLi70T7Mifj2

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks