General

  • Target

    4d420f985eceb4167e21b6a4529e0b49_JaffaCakes118.exe

  • Size

    365KB

  • Sample

    240505-k4b13sdc6w

  • MD5

    4d420f985eceb4167e21b6a4529e0b49

  • SHA1

    5dddf6f312ab50ec958555bba017a1a47b64b9e3

  • SHA256

    6c368993d5ae432e1f6ebaa5af773abc2b3e0c01c25d5f1d71b2305a897760c8

  • SHA512

    4245cfb79c6197f0899300218e0c541c1d59021934e93c96f4d658675825d165c77ceecfd3112bc4a7be3313638e169022e81e6872850d67f12bebfeba85f665

  • SSDEEP

    6144:OuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p1:OzGL2C2aZ2/F1XaveOHjT5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      4d420f985eceb4167e21b6a4529e0b49_JaffaCakes118.exe

    • Size

      365KB

    • MD5

      4d420f985eceb4167e21b6a4529e0b49

    • SHA1

      5dddf6f312ab50ec958555bba017a1a47b64b9e3

    • SHA256

      6c368993d5ae432e1f6ebaa5af773abc2b3e0c01c25d5f1d71b2305a897760c8

    • SHA512

      4245cfb79c6197f0899300218e0c541c1d59021934e93c96f4d658675825d165c77ceecfd3112bc4a7be3313638e169022e81e6872850d67f12bebfeba85f665

    • SSDEEP

      6144:OuJkl8DV12C28tLN2/FkCO0aHftvCGCBhDOHjTPmXHk62p1:OzGL2C2aZ2/F1XaveOHjT5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks