General

  • Target

    fcf4dfaf437e2c8dd5df321a25290a31_JaffaCakes118

  • Size

    404KB

  • Sample

    240928-xr79za1gqq

  • MD5

    fcf4dfaf437e2c8dd5df321a25290a31

  • SHA1

    5a581542e871209d9eddc94c40592a36c64db0a6

  • SHA256

    74b1e246ce000a9b0d354932e7b91ca1fc7594d6ec89998d694ccc7cc5c4fb6d

  • SHA512

    f48673649ba1e22f77d17eda0561e795581d988b3d02092157c6f94d1c88f5388b28c49935fe959a6ddaf8d07876a629e9fcf2a5448f37e7f8a3355149ab98cc

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohN:8IfBoDWoyFblU6hAJQnOP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      fcf4dfaf437e2c8dd5df321a25290a31_JaffaCakes118

    • Size

      404KB

    • MD5

      fcf4dfaf437e2c8dd5df321a25290a31

    • SHA1

      5a581542e871209d9eddc94c40592a36c64db0a6

    • SHA256

      74b1e246ce000a9b0d354932e7b91ca1fc7594d6ec89998d694ccc7cc5c4fb6d

    • SHA512

      f48673649ba1e22f77d17eda0561e795581d988b3d02092157c6f94d1c88f5388b28c49935fe959a6ddaf8d07876a629e9fcf2a5448f37e7f8a3355149ab98cc

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohN:8IfBoDWoyFblU6hAJQnOP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks