General

  • Target

    f28ea04cec3742674e2b65b08787e212_JaffaCakes118

  • Size

    60KB

  • Sample

    240416-dq5mxahh6x

  • MD5

    f28ea04cec3742674e2b65b08787e212

  • SHA1

    d67693bec00cfe03b613abbabe178dab18d13b16

  • SHA256

    2a1721f83f41d7e89d685ff3b157d83a7c39753cf8a1284cc0f2999e77b65630

  • SHA512

    d87e903f8fe365eb4b6c280767e373bf1b70011a70adb98ca6de097af783953a4d094fa3f2c1821d590f49fa1a774758b33f689e095f852baee4ff78f1bcd20e

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPK:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdOQ

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f28ea04cec3742674e2b65b08787e212_JaffaCakes118

    • Size

      60KB

    • MD5

      f28ea04cec3742674e2b65b08787e212

    • SHA1

      d67693bec00cfe03b613abbabe178dab18d13b16

    • SHA256

      2a1721f83f41d7e89d685ff3b157d83a7c39753cf8a1284cc0f2999e77b65630

    • SHA512

      d87e903f8fe365eb4b6c280767e373bf1b70011a70adb98ca6de097af783953a4d094fa3f2c1821d590f49fa1a774758b33f689e095f852baee4ff78f1bcd20e

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPK:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdOQ

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks