General

  • Target

    4f1896a9c18b2cf10225c458aed8bc78_JaffaCakes118

  • Size

    197KB

  • Sample

    240716-tqjnfatckh

  • MD5

    4f1896a9c18b2cf10225c458aed8bc78

  • SHA1

    9196435304721f9d9b9a9ef4fcc986817d68cb78

  • SHA256

    6dc01f45c6881b484fc059029a26d0fc0c15bc89f6444974361751d93fc837c7

  • SHA512

    3bc2bef2c5ec7c79c9fc812576ad5e8c0fbe0ceda1795d106dc47a96eea907fe0c2e45a4420c0087d03424f0409987dce60fcc0ebfb188cd27d4a1d1321bda08

  • SSDEEP

    1536:kUqOou3xsUK2ZM+o5RtWVszFiiDsR7ToP/7OYhVWU2gzeNHYoIeC34/PC7Ruz3hh:3yuTOfolTlYHB+HYoIe+t7R8fU6n8u

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      4f1896a9c18b2cf10225c458aed8bc78_JaffaCakes118

    • Size

      197KB

    • MD5

      4f1896a9c18b2cf10225c458aed8bc78

    • SHA1

      9196435304721f9d9b9a9ef4fcc986817d68cb78

    • SHA256

      6dc01f45c6881b484fc059029a26d0fc0c15bc89f6444974361751d93fc837c7

    • SHA512

      3bc2bef2c5ec7c79c9fc812576ad5e8c0fbe0ceda1795d106dc47a96eea907fe0c2e45a4420c0087d03424f0409987dce60fcc0ebfb188cd27d4a1d1321bda08

    • SSDEEP

      1536:kUqOou3xsUK2ZM+o5RtWVszFiiDsR7ToP/7OYhVWU2gzeNHYoIeC34/PC7Ruz3hh:3yuTOfolTlYHB+HYoIe+t7R8fU6n8u

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks