General

  • Target

    82acd4c6577a7d519374a2f143ad5673_JaffaCakes118

  • Size

    264KB

  • Sample

    241031-l2l9pswfpl

  • MD5

    82acd4c6577a7d519374a2f143ad5673

  • SHA1

    3265e4fb5d4c8f49b14125bbea0560ace3039412

  • SHA256

    d10dd3f5d90dad3983e37068309b5670a216efa82330f066d45ef8a9acd1c78c

  • SHA512

    c9dee22d97c815e2e6aac58f1b6a42f873e9088e03041db41b0e1b9d18a9fe5495878829bf94e6109df338c9721f29f5eccf47c994775635d7ae487cbe600869

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaG:ASeyGpTaesaQUufkL57YsL9NIx9ANaG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      82acd4c6577a7d519374a2f143ad5673_JaffaCakes118

    • Size

      264KB

    • MD5

      82acd4c6577a7d519374a2f143ad5673

    • SHA1

      3265e4fb5d4c8f49b14125bbea0560ace3039412

    • SHA256

      d10dd3f5d90dad3983e37068309b5670a216efa82330f066d45ef8a9acd1c78c

    • SHA512

      c9dee22d97c815e2e6aac58f1b6a42f873e9088e03041db41b0e1b9d18a9fe5495878829bf94e6109df338c9721f29f5eccf47c994775635d7ae487cbe600869

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANaG:ASeyGpTaesaQUufkL57YsL9NIx9ANaG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks