General

  • Target

    2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118

  • Size

    168KB

  • Sample

    240708-gns3waxerb

  • MD5

    2b38a2d7de7de647a99cc5fae2ea0d2a

  • SHA1

    b64522853d584a0471096d2debdfd73a5cd69efe

  • SHA256

    c6f7e1f660dd5e7464b1421aff8c77b4a67a6e1dbaaedb739b03e41d9dff8f60

  • SHA512

    c201f8f310a14026f6c3d34a7b94a945be215e81729d6d66a94c11c1c76e56fc356536b7991c9458477ec2ba413e43245f1f78f448da564923b2df20ccf6d997

  • SSDEEP

    1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfe:eADA0Wc7UJ6LZMaHLW65DE8pxW2

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118

    • Size

      168KB

    • MD5

      2b38a2d7de7de647a99cc5fae2ea0d2a

    • SHA1

      b64522853d584a0471096d2debdfd73a5cd69efe

    • SHA256

      c6f7e1f660dd5e7464b1421aff8c77b4a67a6e1dbaaedb739b03e41d9dff8f60

    • SHA512

      c201f8f310a14026f6c3d34a7b94a945be215e81729d6d66a94c11c1c76e56fc356536b7991c9458477ec2ba413e43245f1f78f448da564923b2df20ccf6d997

    • SSDEEP

      1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfe:eADA0Wc7UJ6LZMaHLW65DE8pxW2

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks