General

  • Target

    60629ee40e43bc214fa8d9133c7df76f_JaffaCakes118

  • Size

    440KB

  • Sample

    240720-3apzys1hnr

  • MD5

    60629ee40e43bc214fa8d9133c7df76f

  • SHA1

    23a4f1f7c86c69b1bd619676a9520756ef34189c

  • SHA256

    c710694a4ce4069e23cc5392bde7c435d7b3f6fc22be954d94f377e3b8195e5c

  • SHA512

    ec2a01d6039674e76bc8cf4a6a142cc48cadb799210b5122850795a138adff7920ab9b3f9470daff733c9c62d198b097960e4f2b10961951972026564b65b651

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpji:oMpASIcWYx2U6hAJQnp

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      60629ee40e43bc214fa8d9133c7df76f_JaffaCakes118

    • Size

      440KB

    • MD5

      60629ee40e43bc214fa8d9133c7df76f

    • SHA1

      23a4f1f7c86c69b1bd619676a9520756ef34189c

    • SHA256

      c710694a4ce4069e23cc5392bde7c435d7b3f6fc22be954d94f377e3b8195e5c

    • SHA512

      ec2a01d6039674e76bc8cf4a6a142cc48cadb799210b5122850795a138adff7920ab9b3f9470daff733c9c62d198b097960e4f2b10961951972026564b65b651

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpji:oMpASIcWYx2U6hAJQnp

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks