Overview

overview

10

Static

static

3

054849799a...18.exe

windows7-x64

10

054849799a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    054849799acd9a57fc329585ce48c8f2_JaffaCakes118

  • Size

    89KB

  • Sample

    240623-f9nvls1fjd

  • MD5

    054849799acd9a57fc329585ce48c8f2

  • SHA1

    31e2e5d51933d0a2540aecac09a339cf332bf042

  • SHA256

    7546606c7ee89a4e384ae27507312f04254805478ed13660e567f9d06ce2c217

  • SHA512

    3c201dd82899484718626ade17b41f074241f437d9def81ed2d6322253f7479964987975525a6f747e56dcd548622e00984bb4230f18074eb8d5cb392914b52e

  • SSDEEP

    1536:Zwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3MA:ZqV9MziU4piRun7C3CP3MA

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      054849799acd9a57fc329585ce48c8f2_JaffaCakes118

    • Size

      89KB

    • MD5

      054849799acd9a57fc329585ce48c8f2

    • SHA1

      31e2e5d51933d0a2540aecac09a339cf332bf042

    • SHA256

      7546606c7ee89a4e384ae27507312f04254805478ed13660e567f9d06ce2c217

    • SHA512

      3c201dd82899484718626ade17b41f074241f437d9def81ed2d6322253f7479964987975525a6f747e56dcd548622e00984bb4230f18074eb8d5cb392914b52e

    • SSDEEP

      1536:Zwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3MA:ZqV9MziU4piRun7C3CP3MA

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks