General

  • Target

    778f81ef7b8407bceef623768b15a0f0_JaffaCakes118

  • Size

    136KB

  • Sample

    241028-ejhp8sxnfq

  • MD5

    778f81ef7b8407bceef623768b15a0f0

  • SHA1

    e3a150a28b6a2425309f5098fccfc90ca31371cf

  • SHA256

    35c589a7a35c6e194c529212e3f314dedbb0df469538e486bc7faf0ce5de7f2b

  • SHA512

    51b2d59239963cd8412cd1d71ede90733deab89e9ef3982ce21ecf7ea7f390445ad3f27accc2b3498e255570f7827bb70258ea0256c7a66ceb8107ea8095e42c

  • SSDEEP

    1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APx:P/5kqCxiXEcO3XfGf2tMUf6odgR5A5

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      778f81ef7b8407bceef623768b15a0f0_JaffaCakes118

    • Size

      136KB

    • MD5

      778f81ef7b8407bceef623768b15a0f0

    • SHA1

      e3a150a28b6a2425309f5098fccfc90ca31371cf

    • SHA256

      35c589a7a35c6e194c529212e3f314dedbb0df469538e486bc7faf0ce5de7f2b

    • SHA512

      51b2d59239963cd8412cd1d71ede90733deab89e9ef3982ce21ecf7ea7f390445ad3f27accc2b3498e255570f7827bb70258ea0256c7a66ceb8107ea8095e42c

    • SSDEEP

      1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APx:P/5kqCxiXEcO3XfGf2tMUf6odgR5A5

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks