General

  • Target

    d5da8784f941ce8377fbefa81cd91045_JaffaCakes118

  • Size

    621KB

  • Sample

    240405-rfh8taee54

  • MD5

    d5da8784f941ce8377fbefa81cd91045

  • SHA1

    9bb51a2a33858ee8d2c0fcffe78719ed420023f7

  • SHA256

    f536d08443317d9295d8c9121a5ca170555f5e262e9f0ff04eca40e7d6c72ae3

  • SHA512

    94e53ccc8eca22b99d683835eedea2346265531d96ac12c353af4546574f3872856c67f679337554872e99798d33c368c8655817b7923f474f71b9606056ea8e

  • SSDEEP

    6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWy9:ima6idv8zzkGHVqoq/gKWo

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      d5da8784f941ce8377fbefa81cd91045_JaffaCakes118

    • Size

      621KB

    • MD5

      d5da8784f941ce8377fbefa81cd91045

    • SHA1

      9bb51a2a33858ee8d2c0fcffe78719ed420023f7

    • SHA256

      f536d08443317d9295d8c9121a5ca170555f5e262e9f0ff04eca40e7d6c72ae3

    • SHA512

      94e53ccc8eca22b99d683835eedea2346265531d96ac12c353af4546574f3872856c67f679337554872e99798d33c368c8655817b7923f474f71b9606056ea8e

    • SSDEEP

      6144:imbmLppYOuakYGWV5Q4XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXWy9:ima6idv8zzkGHVqoq/gKWo

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks