General

  • Target

    254bb132ad03ff0fa6c8062545b47ea6_JaffaCakes118.exe

  • Size

    124KB

  • Sample

    240505-ky52zada7s

  • MD5

    254bb132ad03ff0fa6c8062545b47ea6

  • SHA1

    e4ddd6bb4e8328c929bc198d85f5526c62a94f14

  • SHA256

    d394346f7300663086f23fbb38abaaaf4de0c9d419101566fb79252ed27fe5b6

  • SHA512

    9968bfa8c95025d858bc75358048d729a8ca5a54d279a0ecab6e48cf880852908757664d269d4262c0a08127d4dd4c8d7af7786fdcb8ebdddbdc92ad03b44e21

  • SSDEEP

    1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45sIsb/:DVSRBPCoLY5RIzNdy6YO45U/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      254bb132ad03ff0fa6c8062545b47ea6_JaffaCakes118.exe

    • Size

      124KB

    • MD5

      254bb132ad03ff0fa6c8062545b47ea6

    • SHA1

      e4ddd6bb4e8328c929bc198d85f5526c62a94f14

    • SHA256

      d394346f7300663086f23fbb38abaaaf4de0c9d419101566fb79252ed27fe5b6

    • SHA512

      9968bfa8c95025d858bc75358048d729a8ca5a54d279a0ecab6e48cf880852908757664d269d4262c0a08127d4dd4c8d7af7786fdcb8ebdddbdc92ad03b44e21

    • SSDEEP

      1536:DVih9jjOABjWAqUffzNoBcTwE/sNW4Am8NsuPz4cnSXsWjcdy6YAiQ45sIsb/:DVSRBPCoLY5RIzNdy6YO45U/

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks