General

  • Target

    bc451b1ba21b8af8f37251b147356fbf_JaffaCakes118

  • Size

    139KB

  • Sample

    240823-snk8ta1hnd

  • MD5

    bc451b1ba21b8af8f37251b147356fbf

  • SHA1

    41037544b2e8dc03be9e9d61836df208cb46f2b5

  • SHA256

    1a164e142c45320437e01ea14ea317a04ba7aa4b0dd7ab9443f032cb484e5837

  • SHA512

    00d9d7da50fb4f97725debac4c292311afad62108d2d659ce015ddaec6224d8429f9aa5d8441d3e5fcd562ccd569f8d6f35da8f946392722dbd6b1528ca9cce7

  • SSDEEP

    1536:sJoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd0sWz64TNdF0:DtCc+/h0fmSid01z64TNdF0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      bc451b1ba21b8af8f37251b147356fbf_JaffaCakes118

    • Size

      139KB

    • MD5

      bc451b1ba21b8af8f37251b147356fbf

    • SHA1

      41037544b2e8dc03be9e9d61836df208cb46f2b5

    • SHA256

      1a164e142c45320437e01ea14ea317a04ba7aa4b0dd7ab9443f032cb484e5837

    • SHA512

      00d9d7da50fb4f97725debac4c292311afad62108d2d659ce015ddaec6224d8429f9aa5d8441d3e5fcd562ccd569f8d6f35da8f946392722dbd6b1528ca9cce7

    • SSDEEP

      1536:sJoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd0sWz64TNdF0:DtCc+/h0fmSid01z64TNdF0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks