General

  • Target

    70ef4cdbe641c64f858371e21bc7cf3b_JaffaCakes118

  • Size

    59KB

  • Sample

    240725-x96h4atckh

  • MD5

    70ef4cdbe641c64f858371e21bc7cf3b

  • SHA1

    b4e7be7b2e5e59e6a78b04bd648ab8baccdcb17c

  • SHA256

    2034953730d0881bf4c1217277cb123f7b71de3fd0f719171b587ed7f5058399

  • SHA512

    d60b3ed637280e2ebd929d06fcde2701ccf4f1dc3eaa74ecfa8ce4b504bbb3d4cc300e323d04d0ab403c1797f9a89e5c8b1cff2c7abd8663d12af9f631f259b6

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdw

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      70ef4cdbe641c64f858371e21bc7cf3b_JaffaCakes118

    • Size

      59KB

    • MD5

      70ef4cdbe641c64f858371e21bc7cf3b

    • SHA1

      b4e7be7b2e5e59e6a78b04bd648ab8baccdcb17c

    • SHA256

      2034953730d0881bf4c1217277cb123f7b71de3fd0f719171b587ed7f5058399

    • SHA512

      d60b3ed637280e2ebd929d06fcde2701ccf4f1dc3eaa74ecfa8ce4b504bbb3d4cc300e323d04d0ab403c1797f9a89e5c8b1cff2c7abd8663d12af9f631f259b6

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdw

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks