General

  • Target

    d2a83b6bc1f770d4964edcb7e5854255_JaffaCakes118

  • Size

    536KB

  • Sample

    241207-qlcgsaynbl

  • MD5

    d2a83b6bc1f770d4964edcb7e5854255

  • SHA1

    112ef4ca247f83fe1091b470ea4ce9fcc3b036fb

  • SHA256

    1f82a7ee8be3d927ae9002774e4aabd919d507d25ae3cb9c8df2d891a2ab5cd1

  • SHA512

    0321c145ae2ba7f14288b8b62add3036b9473116fb5468194b441443c6007abede78c31b31068d1bcfa79857af3717561f3e4260e7f427f52618c2a38a92d6b9

  • SSDEEP

    12288:V0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPc:V0P/k4lb2wKatc

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      d2a83b6bc1f770d4964edcb7e5854255_JaffaCakes118

    • Size

      536KB

    • MD5

      d2a83b6bc1f770d4964edcb7e5854255

    • SHA1

      112ef4ca247f83fe1091b470ea4ce9fcc3b036fb

    • SHA256

      1f82a7ee8be3d927ae9002774e4aabd919d507d25ae3cb9c8df2d891a2ab5cd1

    • SHA512

      0321c145ae2ba7f14288b8b62add3036b9473116fb5468194b441443c6007abede78c31b31068d1bcfa79857af3717561f3e4260e7f427f52618c2a38a92d6b9

    • SSDEEP

      12288:V0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPc:V0P/k4lb2wKatc

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks