General

  • Target

    2aa1b076332dae3c56bd097408e67ca9_JaffaCakes118

  • Size

    449KB

  • Sample

    240708-cnbflsxfkl

  • MD5

    2aa1b076332dae3c56bd097408e67ca9

  • SHA1

    767430c796b79db675cdcb18a9bb493312e405ab

  • SHA256

    e2f4c0614f14eb139981dcc642573c38bb3f81f8cadfca700704fe18b4dbba25

  • SHA512

    47c036da60c7261abc1ebf9f65a755d1dee3d8ad6caae63d265d89b2f4a9fd6310ab41d9c3b4140830974fd95c9ea015be52462f7265a8b155808ebec078201e

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTd:CMpASIcWYx2U6hAJQnO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      2aa1b076332dae3c56bd097408e67ca9_JaffaCakes118

    • Size

      449KB

    • MD5

      2aa1b076332dae3c56bd097408e67ca9

    • SHA1

      767430c796b79db675cdcb18a9bb493312e405ab

    • SHA256

      e2f4c0614f14eb139981dcc642573c38bb3f81f8cadfca700704fe18b4dbba25

    • SHA512

      47c036da60c7261abc1ebf9f65a755d1dee3d8ad6caae63d265d89b2f4a9fd6310ab41d9c3b4140830974fd95c9ea015be52462f7265a8b155808ebec078201e

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTd:CMpASIcWYx2U6hAJQnO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks