General

  • Target

    236ebd65d56c477add2210c7f4f6093a_JaffaCakes118

  • Size

    442KB

  • Sample

    240329-qyrr8shg5w

  • MD5

    236ebd65d56c477add2210c7f4f6093a

  • SHA1

    e47a22f5f827dc6fe731d79f8398fd4cf767549d

  • SHA256

    e6d7d26167f78672061260e3a519265f38b3b9392379908bd268bf4521a048c8

  • SHA512

    2f85d821934de5d264b534220bb401f21afaa57f56339ef7d4a00098ff128dd8e780e8bb439a59466b1447b66e965cbf9c5a76192f9d00ef98735e9bf6564540

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMl:rKf1PyKa2H3hOHOHz9JQ6zBa

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      236ebd65d56c477add2210c7f4f6093a_JaffaCakes118

    • Size

      442KB

    • MD5

      236ebd65d56c477add2210c7f4f6093a

    • SHA1

      e47a22f5f827dc6fe731d79f8398fd4cf767549d

    • SHA256

      e6d7d26167f78672061260e3a519265f38b3b9392379908bd268bf4521a048c8

    • SHA512

      2f85d821934de5d264b534220bb401f21afaa57f56339ef7d4a00098ff128dd8e780e8bb439a59466b1447b66e965cbf9c5a76192f9d00ef98735e9bf6564540

    • SSDEEP

      6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMl:rKf1PyKa2H3hOHOHz9JQ6zBa

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks