General

  • Target

    3bdcb1d115cae19ece1818cf857c838c_JaffaCakes118

  • Size

    59KB

  • Sample

    240712-d7dwhsxbnl

  • MD5

    3bdcb1d115cae19ece1818cf857c838c

  • SHA1

    d5def669b4379a6076e55582cb61ae90f0a8bee1

  • SHA256

    27fc491e00d6926032b5a09034b973b7124c9c97e81f44783e9d840197f9b210

  • SHA512

    84b80d7e761fd2b01f89bbfc5699212f32c7defb5d382e10d97ca36d569c04924a3a4ca619465cf64729a8ff987007841a1551de0cc918579a9b321aebda193c

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPE:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      3bdcb1d115cae19ece1818cf857c838c_JaffaCakes118

    • Size

      59KB

    • MD5

      3bdcb1d115cae19ece1818cf857c838c

    • SHA1

      d5def669b4379a6076e55582cb61ae90f0a8bee1

    • SHA256

      27fc491e00d6926032b5a09034b973b7124c9c97e81f44783e9d840197f9b210

    • SHA512

      84b80d7e761fd2b01f89bbfc5699212f32c7defb5d382e10d97ca36d569c04924a3a4ca619465cf64729a8ff987007841a1551de0cc918579a9b321aebda193c

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPE:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks