General

  • Target

    c64f384bd2f16301fcfbf5b77a07265e_JaffaCakes118

  • Size

    208KB

  • Sample

    240405-a6ybzsfc5v

  • MD5

    c64f384bd2f16301fcfbf5b77a07265e

  • SHA1

    cb2db8aa62240619b822d3a0461023215f542591

  • SHA256

    3868f8c5b36471f27eca1ce224e321288cd1f67ce0ea222c170fbb9b18a29f33

  • SHA512

    bf76e77f22ce03300b30e4d7a7aaa8ab065e62dd34a4043662075b2df25172c0d7ce4ca6ff98838ab3fa8e8dd78261ec32d7cf240d6f8fdece3814f52fcd5767

  • SSDEEP

    1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcR51:PuchogM57bIL+eb61TVa+3MJb6I

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      c64f384bd2f16301fcfbf5b77a07265e_JaffaCakes118

    • Size

      208KB

    • MD5

      c64f384bd2f16301fcfbf5b77a07265e

    • SHA1

      cb2db8aa62240619b822d3a0461023215f542591

    • SHA256

      3868f8c5b36471f27eca1ce224e321288cd1f67ce0ea222c170fbb9b18a29f33

    • SHA512

      bf76e77f22ce03300b30e4d7a7aaa8ab065e62dd34a4043662075b2df25172c0d7ce4ca6ff98838ab3fa8e8dd78261ec32d7cf240d6f8fdece3814f52fcd5767

    • SSDEEP

      1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcR51:PuchogM57bIL+eb61TVa+3MJb6I

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks