General

  • Target

    9aa9a33818df89cdbca22350988f4435_JaffaCakes118

  • Size

    59KB

  • Sample

    241125-lhq4jswmej

  • MD5

    9aa9a33818df89cdbca22350988f4435

  • SHA1

    c77e8b214f4f3f6be0cb502690b424e67beaf57c

  • SHA256

    998acd22b606ff651d3a6ea0920296791bfca92fb56163cf4a658176aa9d9c51

  • SHA512

    15d3bb1e08a825203c1c643d1a00e3c50790824c0f9d6c960628fe61d64ef1383374350c9d5ed5730634f957fc52d72d368906de014b354e24f58485eb6f918f

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPU:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      9aa9a33818df89cdbca22350988f4435_JaffaCakes118

    • Size

      59KB

    • MD5

      9aa9a33818df89cdbca22350988f4435

    • SHA1

      c77e8b214f4f3f6be0cb502690b424e67beaf57c

    • SHA256

      998acd22b606ff651d3a6ea0920296791bfca92fb56163cf4a658176aa9d9c51

    • SHA512

      15d3bb1e08a825203c1c643d1a00e3c50790824c0f9d6c960628fe61d64ef1383374350c9d5ed5730634f957fc52d72d368906de014b354e24f58485eb6f918f

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPU:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks