Overview

overview

10

Static

static

10

03210cf681...18.exe

windows7-x64

10

03210cf681...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118

  • Size

    156KB

  • Sample

    240622-vw28eazhmq

  • MD5

    03210cf681bc7de73a54a5062fe7bc87

  • SHA1

    14aebef1f9d5d44ea4d0e0a740ddb19e8870522d

  • SHA256

    54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1

  • SHA512

    6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8

  • SSDEEP

    1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118

    • Size

      156KB

    • MD5

      03210cf681bc7de73a54a5062fe7bc87

    • SHA1

      14aebef1f9d5d44ea4d0e0a740ddb19e8870522d

    • SHA256

      54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1

    • SHA512

      6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8

    • SSDEEP

      1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks