General

  • Target

    06b7167f2f9195c683459d3384c2a9ae_JaffaCakes118

  • Size

    467KB

  • Sample

    241001-vybhgavfpa

  • MD5

    06b7167f2f9195c683459d3384c2a9ae

  • SHA1

    0a81e1e07011fd714e5125b96434a9628ddaec38

  • SHA256

    7074c5e7408a36fbdd515e93f91b514f61da41cc54917cd1aa31b2428ddd0f51

  • SHA512

    8b2585446953b843c10340d2e96506b1fd48c0726d90e6324326141033c4f917ac0314468f5f96654faf17d79f3a2796f7dba16b8c87b5d9b6da305f92e43466

  • SSDEEP

    12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:9x9GzHlTv/b35tecFB6W

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

Targets

    • Target

      06b7167f2f9195c683459d3384c2a9ae_JaffaCakes118

    • Size

      467KB

    • MD5

      06b7167f2f9195c683459d3384c2a9ae

    • SHA1

      0a81e1e07011fd714e5125b96434a9628ddaec38

    • SHA256

      7074c5e7408a36fbdd515e93f91b514f61da41cc54917cd1aa31b2428ddd0f51

    • SHA512

      8b2585446953b843c10340d2e96506b1fd48c0726d90e6324326141033c4f917ac0314468f5f96654faf17d79f3a2796f7dba16b8c87b5d9b6da305f92e43466

    • SSDEEP

      12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:9x9GzHlTv/b35tecFB6W

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks