General

  • Target

    d766f38d2fac1e38497d6472a5504a78_JaffaCakes118

  • Size

    236KB

  • Sample

    241208-raznlsvrcs

  • MD5

    d766f38d2fac1e38497d6472a5504a78

  • SHA1

    83e946b898223d656472529c266c98e7b10cdad9

  • SHA256

    aa4d2c75627e74e6d57265568a3b1e878e49db234c031fc9f6add0048764a782

  • SHA512

    76190fe1a8f6e218c9583f65122da226aa016984da8601b6901c4116ecdc7de0227e1e166c1bf91d7df101e07ff0377ce2d160a5013af1cf2f18d15f51171586

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2R:ZASpvo0LKkRzpxJ2kRqroiR

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      d766f38d2fac1e38497d6472a5504a78_JaffaCakes118

    • Size

      236KB

    • MD5

      d766f38d2fac1e38497d6472a5504a78

    • SHA1

      83e946b898223d656472529c266c98e7b10cdad9

    • SHA256

      aa4d2c75627e74e6d57265568a3b1e878e49db234c031fc9f6add0048764a782

    • SHA512

      76190fe1a8f6e218c9583f65122da226aa016984da8601b6901c4116ecdc7de0227e1e166c1bf91d7df101e07ff0377ce2d160a5013af1cf2f18d15f51171586

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2R:ZASpvo0LKkRzpxJ2kRqroiR

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks