General

  • Target

    8815bdc151e0e79afabde0dce90d15b8_JaffaCakes118

  • Size

    50KB

  • Sample

    241102-165n6sxbme

  • MD5

    8815bdc151e0e79afabde0dce90d15b8

  • SHA1

    c45efde97a621d6460ce8ad22a7458c3e577ba43

  • SHA256

    a1e28080186d3bc8981035936eefe80fbb9881c65ade1de23acc567e586cc028

  • SHA512

    bbf9566e5fe1d015f5becac0c5dc82ca2d5076805977fd3985fe412e0456072251abb62bfb39582da188f6ade67b745e58910540873066a0c9e470195d649ee7

  • SSDEEP

    1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnv2:It7R8fU6n8u

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      8815bdc151e0e79afabde0dce90d15b8_JaffaCakes118

    • Size

      50KB

    • MD5

      8815bdc151e0e79afabde0dce90d15b8

    • SHA1

      c45efde97a621d6460ce8ad22a7458c3e577ba43

    • SHA256

      a1e28080186d3bc8981035936eefe80fbb9881c65ade1de23acc567e586cc028

    • SHA512

      bbf9566e5fe1d015f5becac0c5dc82ca2d5076805977fd3985fe412e0456072251abb62bfb39582da188f6ade67b745e58910540873066a0c9e470195d649ee7

    • SSDEEP

      1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnv2:It7R8fU6n8u

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks