General

  • Target

    79fb56d15ce4fa67610f8424d98745c2_JaffaCakes118

  • Size

    59KB

  • Sample

    241028-rehwnaymgk

  • MD5

    79fb56d15ce4fa67610f8424d98745c2

  • SHA1

    d2cb609ef6f88e4dc83c7b055f7ed3b647ffd9ca

  • SHA256

    fbb9b527a4dd30ff8fb8a7767b7ed7bb28fc843ba940f20a221a033101dd37a5

  • SHA512

    8be683bdda697cacc90955bb1c592c4da22bd38220e6eba6661fe792d06c6ff4316bb02386f6a6c4910d47da295e7666020b3aa95f32c85b1240f75d894f24fa

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPM:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdf

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      79fb56d15ce4fa67610f8424d98745c2_JaffaCakes118

    • Size

      59KB

    • MD5

      79fb56d15ce4fa67610f8424d98745c2

    • SHA1

      d2cb609ef6f88e4dc83c7b055f7ed3b647ffd9ca

    • SHA256

      fbb9b527a4dd30ff8fb8a7767b7ed7bb28fc843ba940f20a221a033101dd37a5

    • SHA512

      8be683bdda697cacc90955bb1c592c4da22bd38220e6eba6661fe792d06c6ff4316bb02386f6a6c4910d47da295e7666020b3aa95f32c85b1240f75d894f24fa

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPM:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdf

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks