General

  • Target

    7952e3fe53f8cc617b873ef96ef5d3bf_JaffaCakes118

  • Size

    168KB

  • Sample

    241028-m8qfdayajp

  • MD5

    7952e3fe53f8cc617b873ef96ef5d3bf

  • SHA1

    8dcc60c41b72d455130d5eb52ab63ad81bd5dee4

  • SHA256

    110a12e005c8c482bef3a563b54809c699f67a428c590c35d1bc47d4784e3dc8

  • SHA512

    46c6e17de0d414af17853914de15eb6e17d1e37c01eb7d64b0c831331da0b9754ba864c42e3aa984297fc558f93c72ac3712f8618074906a9281658a241c2cb8

  • SSDEEP

    1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfyH3:eADA0Wc7UJ6LZMaHLW65DE8pxWqX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      7952e3fe53f8cc617b873ef96ef5d3bf_JaffaCakes118

    • Size

      168KB

    • MD5

      7952e3fe53f8cc617b873ef96ef5d3bf

    • SHA1

      8dcc60c41b72d455130d5eb52ab63ad81bd5dee4

    • SHA256

      110a12e005c8c482bef3a563b54809c699f67a428c590c35d1bc47d4784e3dc8

    • SHA512

      46c6e17de0d414af17853914de15eb6e17d1e37c01eb7d64b0c831331da0b9754ba864c42e3aa984297fc558f93c72ac3712f8618074906a9281658a241c2cb8

    • SSDEEP

      1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfyH3:eADA0Wc7UJ6LZMaHLW65DE8pxWqX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks