General

  • Target

    0ed55e327b43e67236e27df919ab7a05_JaffaCakes118

  • Size

    510KB

  • Sample

    240328-ysjhnsfc4v

  • MD5

    0ed55e327b43e67236e27df919ab7a05

  • SHA1

    a023884970e20cb0666bb2d0dfcec11581744a81

  • SHA256

    eb27e1fcd17910d5e711665068887b3c443ffb6d6e87dbbdd85dc735c802bdaa

  • SHA512

    e81c8096863904ccb9b77b9a4aa5d1f1973c52fb01624358f332e8eed6b9abda39a6966643a4eed6a80d4e60c16e0d42dde468c95cc7157b8ed03ffa89ca4bad

  • SSDEEP

    12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFf:j/D0caF8wvhb43pDbf

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Targets

    • Target

      0ed55e327b43e67236e27df919ab7a05_JaffaCakes118

    • Size

      510KB

    • MD5

      0ed55e327b43e67236e27df919ab7a05

    • SHA1

      a023884970e20cb0666bb2d0dfcec11581744a81

    • SHA256

      eb27e1fcd17910d5e711665068887b3c443ffb6d6e87dbbdd85dc735c802bdaa

    • SHA512

      e81c8096863904ccb9b77b9a4aa5d1f1973c52fb01624358f332e8eed6b9abda39a6966643a4eed6a80d4e60c16e0d42dde468c95cc7157b8ed03ffa89ca4bad

    • SSDEEP

      12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFf:j/D0caF8wvhb43pDbf

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks