General

  • Target

    959739b4eefa6fd1987bee3dbf3dde2d_JaffaCakes118

  • Size

    240KB

  • Sample

    241124-syylwswmaw

  • MD5

    959739b4eefa6fd1987bee3dbf3dde2d

  • SHA1

    7b3c43acb07f85a5e68d2911e7eeb8cffac0ca83

  • SHA256

    f61aa99140b4258230ebc33e3d394e4798922984a939fda50b4c956c0ec24d53

  • SHA512

    d251f813652644c8a9b4bcf75b89d69fa7fe7d4fa0f9e8f30719267f03add10ced363ab41ab2f993d30f36e66dd162238478f55b7144b59ceb9ece61684ba143

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2U:ZASpvo0LKkRzpxJ2kRqroiU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      959739b4eefa6fd1987bee3dbf3dde2d_JaffaCakes118

    • Size

      240KB

    • MD5

      959739b4eefa6fd1987bee3dbf3dde2d

    • SHA1

      7b3c43acb07f85a5e68d2911e7eeb8cffac0ca83

    • SHA256

      f61aa99140b4258230ebc33e3d394e4798922984a939fda50b4c956c0ec24d53

    • SHA512

      d251f813652644c8a9b4bcf75b89d69fa7fe7d4fa0f9e8f30719267f03add10ced363ab41ab2f993d30f36e66dd162238478f55b7144b59ceb9ece61684ba143

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2U:ZASpvo0LKkRzpxJ2kRqroiU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks