General

  • Target

    79fba638017f31c7544ee935ff5a2e1a_JaffaCakes118

  • Size

    440KB

  • Sample

    241028-retm6aymgp

  • MD5

    79fba638017f31c7544ee935ff5a2e1a

  • SHA1

    7d0e650eadb6588429e915a33646ecd4c203aba4

  • SHA256

    23d7ceb4362993c524a7218ca632976a4f24b791332830ca0c7ea44f51d77e22

  • SHA512

    47cbdb3e20226c7fd5b92ccc74cdf7a4ac67e6e79084082b9d71d9e78d4659f9f1735577ba6b5ca109418733d7e037706f3a52c6a8f059ac16cf4e2f27495703

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnb

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      79fba638017f31c7544ee935ff5a2e1a_JaffaCakes118

    • Size

      440KB

    • MD5

      79fba638017f31c7544ee935ff5a2e1a

    • SHA1

      7d0e650eadb6588429e915a33646ecd4c203aba4

    • SHA256

      23d7ceb4362993c524a7218ca632976a4f24b791332830ca0c7ea44f51d77e22

    • SHA512

      47cbdb3e20226c7fd5b92ccc74cdf7a4ac67e6e79084082b9d71d9e78d4659f9f1735577ba6b5ca109418733d7e037706f3a52c6a8f059ac16cf4e2f27495703

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnb

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks