General

  • Target

    7cbfcfbea7895720df5904630f97a3ac_JaffaCakes118

  • Size

    447KB

  • Sample

    240731-rppf7axfpm

  • MD5

    7cbfcfbea7895720df5904630f97a3ac

  • SHA1

    0c83df8fa50c2591964603f0a02db8f9621ee30d

  • SHA256

    ed5e31592f1ab4b99ec67646993946ecfb7226c1c3fc6aaf8188f9665047057e

  • SHA512

    3a45796868070cf024cf0ecba8bf9fa81e7fecb32c21f836a2e3c6622691aa114317691c865074c4b17664acbaeb31b26054e1046efd2758b04860e09dfa338a

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpo+:PMpASIcWYx2U6hAJQni

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      7cbfcfbea7895720df5904630f97a3ac_JaffaCakes118

    • Size

      447KB

    • MD5

      7cbfcfbea7895720df5904630f97a3ac

    • SHA1

      0c83df8fa50c2591964603f0a02db8f9621ee30d

    • SHA256

      ed5e31592f1ab4b99ec67646993946ecfb7226c1c3fc6aaf8188f9665047057e

    • SHA512

      3a45796868070cf024cf0ecba8bf9fa81e7fecb32c21f836a2e3c6622691aa114317691c865074c4b17664acbaeb31b26054e1046efd2758b04860e09dfa338a

    • SSDEEP

      6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpo+:PMpASIcWYx2U6hAJQni

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks