General

  • Target

    23735f69905e775dea99756cfe86f421_JaffaCakes118

  • Size

    240KB

  • Sample

    240329-qzakcaad88

  • MD5

    23735f69905e775dea99756cfe86f421

  • SHA1

    7ece328ffcc339597e90e133cb8f5e5fb9f8884c

  • SHA256

    98d422b40ed6a98bc48b1ddb9f90c2f121b39489fd0a96fadfc09173d43de2fe

  • SHA512

    fc7e3ef8831ae6bfdf443a1f14d643dc45ae6c423188a63cd03271b6ce0323c6eb7fc8285b11992208d77f8518852f6b512e44688aef6e31c4a5f9c4f307bb06

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      23735f69905e775dea99756cfe86f421_JaffaCakes118

    • Size

      240KB

    • MD5

      23735f69905e775dea99756cfe86f421

    • SHA1

      7ece328ffcc339597e90e133cb8f5e5fb9f8884c

    • SHA256

      98d422b40ed6a98bc48b1ddb9f90c2f121b39489fd0a96fadfc09173d43de2fe

    • SHA512

      fc7e3ef8831ae6bfdf443a1f14d643dc45ae6c423188a63cd03271b6ce0323c6eb7fc8285b11992208d77f8518852f6b512e44688aef6e31c4a5f9c4f307bb06

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks