General

  • Target

    72342dce49605847c435c0099ab2727f_JaffaCakes118

  • Size

    536KB

  • Sample

    241024-eelakavfll

  • MD5

    72342dce49605847c435c0099ab2727f

  • SHA1

    ca17d3a0f0262924eede05a623f716534c09c168

  • SHA256

    21374c2aa1e46683b163928dfceea447adb6e74b30b99271510b3a905262cc56

  • SHA512

    259ca73ade36e6c0a8a90a49b7fbf2475ff26421bc6bef468a612b6ced68c31e817fdeb3ccd20f362750627fd1065c09d348d098cce0e800710d006ed727931d

  • SSDEEP

    12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPP:q0P/k4lb2wKatP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      72342dce49605847c435c0099ab2727f_JaffaCakes118

    • Size

      536KB

    • MD5

      72342dce49605847c435c0099ab2727f

    • SHA1

      ca17d3a0f0262924eede05a623f716534c09c168

    • SHA256

      21374c2aa1e46683b163928dfceea447adb6e74b30b99271510b3a905262cc56

    • SHA512

      259ca73ade36e6c0a8a90a49b7fbf2475ff26421bc6bef468a612b6ced68c31e817fdeb3ccd20f362750627fd1065c09d348d098cce0e800710d006ed727931d

    • SSDEEP

      12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPP:q0P/k4lb2wKatP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks