General

  • Target

    82931e46f5f01fd16a70796f601a4794_JaffaCakes118

  • Size

    59KB

  • Sample

    241031-k4fdhatmhx

  • MD5

    82931e46f5f01fd16a70796f601a4794

  • SHA1

    e3e4952fbcc0715ca20a113f8c2ae46b12975c08

  • SHA256

    7bc667f6b0abaa040977919b96ed061e9e245612042aa587cdb14e4b5cf9a627

  • SHA512

    d78c9525acda8d1b862a7738291d6d7a3a2994380b71cc83bd5001fd966ac6f169f69abd1d375337f175073e18558ea79ab3001e0cc1b2a2c02ea7f63d479fc6

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPI:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdom

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      82931e46f5f01fd16a70796f601a4794_JaffaCakes118

    • Size

      59KB

    • MD5

      82931e46f5f01fd16a70796f601a4794

    • SHA1

      e3e4952fbcc0715ca20a113f8c2ae46b12975c08

    • SHA256

      7bc667f6b0abaa040977919b96ed061e9e245612042aa587cdb14e4b5cf9a627

    • SHA512

      d78c9525acda8d1b862a7738291d6d7a3a2994380b71cc83bd5001fd966ac6f169f69abd1d375337f175073e18558ea79ab3001e0cc1b2a2c02ea7f63d479fc6

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPI:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdom

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks