General

  • Target

    35509ebea985026ecb4d741ee200a783_JaffaCakes118

  • Size

    452KB

  • Sample

    240710-sxfppavhjm

  • MD5

    35509ebea985026ecb4d741ee200a783

  • SHA1

    6c3e8bbb0c534cdcfefc6eaad3cac8002943d9b2

  • SHA256

    d6b7378931e60173582294d361e78bbceebbf053eaacbb90719bd9de87d3d9a0

  • SHA512

    2c574b4a417928ea3ebebb57fa2823ac8810f1799835f2fe816d90cf8e1d6a5a4d1f381b19a49f69698e6f656483ce5645722b5464f5e09cf516b47c23c38003

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFz:CMpASIcWYx2U6hAJQna

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      35509ebea985026ecb4d741ee200a783_JaffaCakes118

    • Size

      452KB

    • MD5

      35509ebea985026ecb4d741ee200a783

    • SHA1

      6c3e8bbb0c534cdcfefc6eaad3cac8002943d9b2

    • SHA256

      d6b7378931e60173582294d361e78bbceebbf053eaacbb90719bd9de87d3d9a0

    • SHA512

      2c574b4a417928ea3ebebb57fa2823ac8810f1799835f2fe816d90cf8e1d6a5a4d1f381b19a49f69698e6f656483ce5645722b5464f5e09cf516b47c23c38003

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFz:CMpASIcWYx2U6hAJQna

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks