General

  • Target

    68bd360f6d2f75b8a456432a7f4b6181_JaffaCakes118

  • Size

    448KB

  • Sample

    240723-ywg41svgqq

  • MD5

    68bd360f6d2f75b8a456432a7f4b6181

  • SHA1

    71af916f5949fb3b9f78ddb445bd870df3ba9070

  • SHA256

    98d6667c8078bc4e80b02010bfa3b63372f4eadf0134b24f818363bac21315e3

  • SHA512

    024c8094ba3260c2d2e24aba33bf158306700a06c87bb095d616715b4957fa0e40c9d978712b8f211c47c64a1762d9c2886f9eac134a01cb77ba22a079b90044

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoh:PMpASIcWYx2U6hAJQn1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      68bd360f6d2f75b8a456432a7f4b6181_JaffaCakes118

    • Size

      448KB

    • MD5

      68bd360f6d2f75b8a456432a7f4b6181

    • SHA1

      71af916f5949fb3b9f78ddb445bd870df3ba9070

    • SHA256

      98d6667c8078bc4e80b02010bfa3b63372f4eadf0134b24f818363bac21315e3

    • SHA512

      024c8094ba3260c2d2e24aba33bf158306700a06c87bb095d616715b4957fa0e40c9d978712b8f211c47c64a1762d9c2886f9eac134a01cb77ba22a079b90044

    • SSDEEP

      6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoh:PMpASIcWYx2U6hAJQn1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks