General

  • Target

    3b974b82bbac7a0ebb579e0bf03c8a54_JaffaCakes118

  • Size

    185KB

  • Sample

    240712-cemghswfpc

  • MD5

    3b974b82bbac7a0ebb579e0bf03c8a54

  • SHA1

    dd9b7613937dd032c30eef90f4eb4393bc1b0469

  • SHA256

    8d6711337e3f4934a1bd4e174e13343a8d47156f3ac7b50203957aa9c8784685

  • SHA512

    2727b63d3754d5180ac06ef783e00ec01c9d62044f2c01a6f5633e9a1d06ccbe095f3eaad33ac386cf240fd7d6e42d4e197ed2b99afd9f11fe7cb7ec8ba76ae9

  • SSDEEP

    3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFck:2mvqeP33AYFIN9treHek

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3b974b82bbac7a0ebb579e0bf03c8a54_JaffaCakes118

    • Size

      185KB

    • MD5

      3b974b82bbac7a0ebb579e0bf03c8a54

    • SHA1

      dd9b7613937dd032c30eef90f4eb4393bc1b0469

    • SHA256

      8d6711337e3f4934a1bd4e174e13343a8d47156f3ac7b50203957aa9c8784685

    • SHA512

      2727b63d3754d5180ac06ef783e00ec01c9d62044f2c01a6f5633e9a1d06ccbe095f3eaad33ac386cf240fd7d6e42d4e197ed2b99afd9f11fe7cb7ec8ba76ae9

    • SSDEEP

      3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFck:2mvqeP33AYFIN9treHek

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks