General

  • Target

    88fc65aabc5e0d85ac7b4492ce91c25d_JaffaCakes118

  • Size

    535KB

  • Sample

    241103-bzkyra1djb

  • MD5

    88fc65aabc5e0d85ac7b4492ce91c25d

  • SHA1

    f755aaa79828da46f919166ae7d3a704c265abfc

  • SHA256

    549fea1b9113b1e41724bda53f2c04cbc49615cbbb4ba2f01b7f66f2f4755342

  • SHA512

    1ca51aa833817000b291f6a167d0b41ff328e966875fbd9f137de92da51280e38de13cbe9e90e976a64dd287e2a6a6a04afbd38812d4e9a5bb1d46e5411f0236

  • SSDEEP

    12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2z:cLjQC+bs0YOz

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      88fc65aabc5e0d85ac7b4492ce91c25d_JaffaCakes118

    • Size

      535KB

    • MD5

      88fc65aabc5e0d85ac7b4492ce91c25d

    • SHA1

      f755aaa79828da46f919166ae7d3a704c265abfc

    • SHA256

      549fea1b9113b1e41724bda53f2c04cbc49615cbbb4ba2f01b7f66f2f4755342

    • SHA512

      1ca51aa833817000b291f6a167d0b41ff328e966875fbd9f137de92da51280e38de13cbe9e90e976a64dd287e2a6a6a04afbd38812d4e9a5bb1d46e5411f0236

    • SSDEEP

      12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2z:cLjQC+bs0YOz

    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks