General

  • Target

    3158c28c5c76a80abac7756bcf4cede9_JaffaCakes118

  • Size

    141KB

  • Sample

    240709-waqg6axgqc

  • MD5

    3158c28c5c76a80abac7756bcf4cede9

  • SHA1

    2e51dea121307c9aaeccbcb1d707a1d9c49d0013

  • SHA256

    99d9a56d2bea8fa567cdc62adbcef5dd6e815adafc4b87a0e8fb98dc9f57658a

  • SHA512

    5790e54f39cd75aeba104f946710c8078a50e3ea4cac56c353b6e74021926f0ac9829b6dd4c3002e5b7807c9b01b6eac8b9e573559a5814ad7e0ae9bd46825d8

  • SSDEEP

    1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeZ:sjIKn1xUswhsGTgI23RGUXmUDW

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      3158c28c5c76a80abac7756bcf4cede9_JaffaCakes118

    • Size

      141KB

    • MD5

      3158c28c5c76a80abac7756bcf4cede9

    • SHA1

      2e51dea121307c9aaeccbcb1d707a1d9c49d0013

    • SHA256

      99d9a56d2bea8fa567cdc62adbcef5dd6e815adafc4b87a0e8fb98dc9f57658a

    • SHA512

      5790e54f39cd75aeba104f946710c8078a50e3ea4cac56c353b6e74021926f0ac9829b6dd4c3002e5b7807c9b01b6eac8b9e573559a5814ad7e0ae9bd46825d8

    • SSDEEP

      1536:s1baYkjUIKECOmxUNKwhB+GT/4I2fm3w9Rri+pXmf8t1dn4vcjeZ:sjIKn1xUswhsGTgI23RGUXmUDW

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks