General

  • Target

    47f23a196db2e08e9c81fe0454868415_JaffaCakes118

  • Size

    50KB

  • Sample

    240715-dlntlaxgkf

  • MD5

    47f23a196db2e08e9c81fe0454868415

  • SHA1

    094266fb3d62147d64d98f66535afd078796080d

  • SHA256

    485e37ab5a5773021c36eb33524c8a0effd979bb4d4922373c750fc63d078d45

  • SHA512

    5475752c2353e8eaff6fcd50911fde2970b65b04297b10c411136ffb998c658563b316234c4ed6a1ac888e8d0366bc6544fc19524a14c5ea80d5a29e46357b9b

  • SSDEEP

    1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnUL:It7R8fU6n8UL

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      47f23a196db2e08e9c81fe0454868415_JaffaCakes118

    • Size

      50KB

    • MD5

      47f23a196db2e08e9c81fe0454868415

    • SHA1

      094266fb3d62147d64d98f66535afd078796080d

    • SHA256

      485e37ab5a5773021c36eb33524c8a0effd979bb4d4922373c750fc63d078d45

    • SHA512

      5475752c2353e8eaff6fcd50911fde2970b65b04297b10c411136ffb998c658563b316234c4ed6a1ac888e8d0366bc6544fc19524a14c5ea80d5a29e46357b9b

    • SSDEEP

      1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnUL:It7R8fU6n8UL

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks