General

  • Target

    02f3da51f4409e66e97c0ba3980fdb02_JaffaCakes118

  • Size

    185KB

  • Sample

    240622-t2j4cavapf

  • MD5

    02f3da51f4409e66e97c0ba3980fdb02

  • SHA1

    3cea93ea97ed69c22a5c6f64e00ef47d3772b460

  • SHA256

    ca4ebc4a9c70840ec271868de65c29b545eafb52644dc539e4114cd8562acc05

  • SHA512

    6e8eed72f958e6b7b0a4f7dd011236e8a1f784de4ad6a0cfa1414cca62201694bbe3beeeba58ddab49592124e46dcabeddf35344b3baa6cf83a9c1fb2c91129f

  • SSDEEP

    3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFcw:2mvqeP33AYFIN9treHew

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      02f3da51f4409e66e97c0ba3980fdb02_JaffaCakes118

    • Size

      185KB

    • MD5

      02f3da51f4409e66e97c0ba3980fdb02

    • SHA1

      3cea93ea97ed69c22a5c6f64e00ef47d3772b460

    • SHA256

      ca4ebc4a9c70840ec271868de65c29b545eafb52644dc539e4114cd8562acc05

    • SHA512

      6e8eed72f958e6b7b0a4f7dd011236e8a1f784de4ad6a0cfa1414cca62201694bbe3beeeba58ddab49592124e46dcabeddf35344b3baa6cf83a9c1fb2c91129f

    • SSDEEP

      3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFcw:2mvqeP33AYFIN9treHew

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks