General

  • Target

    5bd2ca876cc74bf47b18ea302c93466a_JaffaCakes118

  • Size

    59KB

  • Sample

    240719-n1xedszbpn

  • MD5

    5bd2ca876cc74bf47b18ea302c93466a

  • SHA1

    6f3fdffc4aceb687eecc167cf66e7414fce344c6

  • SHA256

    0afb4a80998dbe297c6ae89a2f925353dc6a74e353103a2917e0d27ec4f48447

  • SHA512

    695aee0618ea63fe9e2602bcd31a5759b07893e54006d4abcacd667dafa3d69f4e0da179671f02cce9b952f5240c0528a99abd1277b6a71ebe6f3ee3f145aa1d

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPN:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdC

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      5bd2ca876cc74bf47b18ea302c93466a_JaffaCakes118

    • Size

      59KB

    • MD5

      5bd2ca876cc74bf47b18ea302c93466a

    • SHA1

      6f3fdffc4aceb687eecc167cf66e7414fce344c6

    • SHA256

      0afb4a80998dbe297c6ae89a2f925353dc6a74e353103a2917e0d27ec4f48447

    • SHA512

      695aee0618ea63fe9e2602bcd31a5759b07893e54006d4abcacd667dafa3d69f4e0da179671f02cce9b952f5240c0528a99abd1277b6a71ebe6f3ee3f145aa1d

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPN:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdC

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks