General

  • Target

    03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118

  • Size

    156KB

  • Sample

    240622-vw28eazhmq

  • MD5

    03210cf681bc7de73a54a5062fe7bc87

  • SHA1

    14aebef1f9d5d44ea4d0e0a740ddb19e8870522d

  • SHA256

    54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1

  • SHA512

    6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8

  • SSDEEP

    1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118

    • Size

      156KB

    • MD5

      03210cf681bc7de73a54a5062fe7bc87

    • SHA1

      14aebef1f9d5d44ea4d0e0a740ddb19e8870522d

    • SHA256

      54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1

    • SHA512

      6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8

    • SSDEEP

      1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks