General

  • Target

    1d387e8fdc34aa18e48e94f63944b525_JaffaCakes118

  • Size

    137KB

  • Sample

    240329-j9b3ladh23

  • MD5

    1d387e8fdc34aa18e48e94f63944b525

  • SHA1

    73b081ce4e58cf632de3e28741cbfb4e191aeb6d

  • SHA256

    5e3516f802661bc84ff560a04d6d2bdd7e5051bcf168b15625e88c951ffe975a

  • SHA512

    7ec526399943712d1007e96766c7dbb916abc86044563ada3d614f37871212e5a6f513599bc43e7eeb8272fc92a844b317d765796f657af141de6beb9fe89588

  • SSDEEP

    1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeRVW:sjIKn1xUswhsGTgI23RGUXmUDd

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      1d387e8fdc34aa18e48e94f63944b525_JaffaCakes118

    • Size

      137KB

    • MD5

      1d387e8fdc34aa18e48e94f63944b525

    • SHA1

      73b081ce4e58cf632de3e28741cbfb4e191aeb6d

    • SHA256

      5e3516f802661bc84ff560a04d6d2bdd7e5051bcf168b15625e88c951ffe975a

    • SHA512

      7ec526399943712d1007e96766c7dbb916abc86044563ada3d614f37871212e5a6f513599bc43e7eeb8272fc92a844b317d765796f657af141de6beb9fe89588

    • SSDEEP

      1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeRVW:sjIKn1xUswhsGTgI23RGUXmUDd

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks