General

  • Target

    5d7a6e72d042b65a2aa109d32fc87717_JaffaCakes118

  • Size

    441KB

  • Sample

    240719-yvpsga1cqg

  • MD5

    5d7a6e72d042b65a2aa109d32fc87717

  • SHA1

    87c9c439680df509d23756ba33e07d02dfd9fb90

  • SHA256

    42c8128082c4b594eeff1ce727934ae075d406121ca5d5635765edd92a72da5a

  • SHA512

    0c248152d39713bb1f4818958f1d1c87cfa185ac37beb4cfc1a96f81cf1b3bb5539bdbb609245b50c9f4e8a585c757c1e779fcba2ec66daa582533aec7b9eb15

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMn:rKf1PyKa2H3hOHOHz9JQ6zB0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      5d7a6e72d042b65a2aa109d32fc87717_JaffaCakes118

    • Size

      441KB

    • MD5

      5d7a6e72d042b65a2aa109d32fc87717

    • SHA1

      87c9c439680df509d23756ba33e07d02dfd9fb90

    • SHA256

      42c8128082c4b594eeff1ce727934ae075d406121ca5d5635765edd92a72da5a

    • SHA512

      0c248152d39713bb1f4818958f1d1c87cfa185ac37beb4cfc1a96f81cf1b3bb5539bdbb609245b50c9f4e8a585c757c1e779fcba2ec66daa582533aec7b9eb15

    • SSDEEP

      6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMn:rKf1PyKa2H3hOHOHz9JQ6zB0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks