General

  • Target

    4f4ac46f480b06977364a6874dd172ba_JaffaCakes118

  • Size

    155KB

  • Sample

    241016-12xg1awanc

  • MD5

    4f4ac46f480b06977364a6874dd172ba

  • SHA1

    9391cc08f386fa8be41ab9cd8bf27508cc2748fc

  • SHA256

    909206af32fab228398a8e0747891ef06c1865b2a055a13320304a4ac81f4ab4

  • SHA512

    b346b07e188e21a6f134a10ea07acb050015cd78f9c2fd0cd5dc2aa59ce66d0cc8e8fb2b92daabe9825a3e95ee5ddfb8e8ca44ca1f85e285274a4b855314bb9b

  • SSDEEP

    1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xz:yp56zRJ83+OJ7NoGvdwWy6k04yW/KG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      4f4ac46f480b06977364a6874dd172ba_JaffaCakes118

    • Size

      155KB

    • MD5

      4f4ac46f480b06977364a6874dd172ba

    • SHA1

      9391cc08f386fa8be41ab9cd8bf27508cc2748fc

    • SHA256

      909206af32fab228398a8e0747891ef06c1865b2a055a13320304a4ac81f4ab4

    • SHA512

      b346b07e188e21a6f134a10ea07acb050015cd78f9c2fd0cd5dc2aa59ce66d0cc8e8fb2b92daabe9825a3e95ee5ddfb8e8ca44ca1f85e285274a4b855314bb9b

    • SSDEEP

      1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xz:yp56zRJ83+OJ7NoGvdwWy6k04yW/KG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks