General

  • Target

    fd9aded61d527a54c25074b393317345_JaffaCakes118

  • Size

    402KB

  • Sample

    240420-zf91jahd79

  • MD5

    fd9aded61d527a54c25074b393317345

  • SHA1

    85d61f16ab84970a575ee50c22802fa646db8adf

  • SHA256

    02c5e990bac9e02387ff00e3d8da1f70d83b254456551248c28ede1cf25c80fe

  • SHA512

    f06ca9f76c0aa5c9a2d85e182da2fd49c5bd910598188b2645fdf2d86b927da18cf1aeff4cc254cdaff7ad5eab7da688a001bd5bc29242183fe9028418c9876c

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohN:8IfBoDWoyFblU6hAJQnOH

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      fd9aded61d527a54c25074b393317345_JaffaCakes118

    • Size

      402KB

    • MD5

      fd9aded61d527a54c25074b393317345

    • SHA1

      85d61f16ab84970a575ee50c22802fa646db8adf

    • SHA256

      02c5e990bac9e02387ff00e3d8da1f70d83b254456551248c28ede1cf25c80fe

    • SHA512

      f06ca9f76c0aa5c9a2d85e182da2fd49c5bd910598188b2645fdf2d86b927da18cf1aeff4cc254cdaff7ad5eab7da688a001bd5bc29242183fe9028418c9876c

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohN:8IfBoDWoyFblU6hAJQnOH

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks