General

  • Target

    10995dcf84f2070d6b49cb9ab4a88862_JaffaCakes118

  • Size

    264KB

  • Sample

    241003-1jbgta1gpc

  • MD5

    10995dcf84f2070d6b49cb9ab4a88862

  • SHA1

    efb9388c7cf4e47b1dbd1290af677b0f29ea8a0e

  • SHA256

    815e3457cf33bc0221afe4b3f8699e80d21712d4f24047d7bb7a746b3a917fa9

  • SHA512

    295e59ffd2fda39aa13b06f62a87f48d6766e9ce87b0abc91ffbc48beaa2e0c3d13c3b646cae3cc8eb1e71e4e90f347f29ecdddea5128069274be6e0c90f2143

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaE:ASeyGpTaesaQUufkL57YsL9NIx9ANaE

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      10995dcf84f2070d6b49cb9ab4a88862_JaffaCakes118

    • Size

      264KB

    • MD5

      10995dcf84f2070d6b49cb9ab4a88862

    • SHA1

      efb9388c7cf4e47b1dbd1290af677b0f29ea8a0e

    • SHA256

      815e3457cf33bc0221afe4b3f8699e80d21712d4f24047d7bb7a746b3a917fa9

    • SHA512

      295e59ffd2fda39aa13b06f62a87f48d6766e9ce87b0abc91ffbc48beaa2e0c3d13c3b646cae3cc8eb1e71e4e90f347f29ecdddea5128069274be6e0c90f2143

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaE:ASeyGpTaesaQUufkL57YsL9NIx9ANaE

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks