General

  • Target

    d87385c9bc213e4b3cb27518a3712e41_JaffaCakes118

  • Size

    439KB

  • Sample

    241208-xy78jssney

  • MD5

    d87385c9bc213e4b3cb27518a3712e41

  • SHA1

    b0c75ec76acf79589b42dd48dd2c38f1d9dd1fac

  • SHA256

    b3e936d140efd7ab76f3650711f3cd974cc1f2e5ed185b08aa85915b1da6e599

  • SHA512

    dff3aa4e100e22d128e2d53105f923bb3456ee08a016862d09b855d0ced2cdaf6027303fedac80e2deca07f0a5f65a30ff9fcd104e06e8a06f6e6970a454da45

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjS:oMpASIcWYx2U6hAJQnP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      d87385c9bc213e4b3cb27518a3712e41_JaffaCakes118

    • Size

      439KB

    • MD5

      d87385c9bc213e4b3cb27518a3712e41

    • SHA1

      b0c75ec76acf79589b42dd48dd2c38f1d9dd1fac

    • SHA256

      b3e936d140efd7ab76f3650711f3cd974cc1f2e5ed185b08aa85915b1da6e599

    • SHA512

      dff3aa4e100e22d128e2d53105f923bb3456ee08a016862d09b855d0ced2cdaf6027303fedac80e2deca07f0a5f65a30ff9fcd104e06e8a06f6e6970a454da45

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjS:oMpASIcWYx2U6hAJQnP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks