General

  • Target

    bcbea6626b1d6e8a727d772fcaea5e52_JaffaCakes118

  • Size

    60KB

  • Sample

    240404-tn3njacb5y

  • MD5

    bcbea6626b1d6e8a727d772fcaea5e52

  • SHA1

    42e9c1498739ab218a2a9fa0d27e69d436fd687e

  • SHA256

    3703389c7ad80df5e4c6404bdf41b499a3bf6157367454dd6dd8fc2f336822f5

  • SHA512

    db0b0cf254774d7d4e700614aa44653c28f39c935d9ede5a2dd5512b39ab5ae9ae5059a3aff05451aa09e10a4f63405de39b1e2f94d19f38953bf0d7c5fdefe5

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPy:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdnV

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      bcbea6626b1d6e8a727d772fcaea5e52_JaffaCakes118

    • Size

      60KB

    • MD5

      bcbea6626b1d6e8a727d772fcaea5e52

    • SHA1

      42e9c1498739ab218a2a9fa0d27e69d436fd687e

    • SHA256

      3703389c7ad80df5e4c6404bdf41b499a3bf6157367454dd6dd8fc2f336822f5

    • SHA512

      db0b0cf254774d7d4e700614aa44653c28f39c935d9ede5a2dd5512b39ab5ae9ae5059a3aff05451aa09e10a4f63405de39b1e2f94d19f38953bf0d7c5fdefe5

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPy:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdnV

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks