General

  • Target

    79cfacab10ccd2121527062f1a083880_JaffaCakes118

  • Size

    59KB

  • Sample

    240730-yjp9vsvhln

  • MD5

    79cfacab10ccd2121527062f1a083880

  • SHA1

    92b38d2971f6a90094cd7e6bcc205b8635c30410

  • SHA256

    05b595f4eba967c0917e59563f3c4c05a7d1ef128d5f6886c8602dc10cc5f6df

  • SHA512

    c70b1a74cc93ac61cbbeb2e6d664a0f6a52af16315a24f0829dfdb601350cff92c577dd42c21a4b0bfdf179a8d8761c0dd0d9cf58e6ab89556bf7ce11b8e989a

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPJ:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      79cfacab10ccd2121527062f1a083880_JaffaCakes118

    • Size

      59KB

    • MD5

      79cfacab10ccd2121527062f1a083880

    • SHA1

      92b38d2971f6a90094cd7e6bcc205b8635c30410

    • SHA256

      05b595f4eba967c0917e59563f3c4c05a7d1ef128d5f6886c8602dc10cc5f6df

    • SHA512

      c70b1a74cc93ac61cbbeb2e6d664a0f6a52af16315a24f0829dfdb601350cff92c577dd42c21a4b0bfdf179a8d8761c0dd0d9cf58e6ab89556bf7ce11b8e989a

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPJ:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdO

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks