General

  • Target

    e1dd9f93d95a85af03b136f420884518_JaffaCakes118

  • Size

    192KB

  • Sample

    241211-rqp44s1jbl

  • MD5

    e1dd9f93d95a85af03b136f420884518

  • SHA1

    5006e9c467ac8e1d432590db24ab98e3668644ca

  • SHA256

    c1bb46519446a732665bf0bff9bf3f0b64ee57b909e65019521e98f5d0b3e65b

  • SHA512

    b4d9928b72b25fae0ea88637235c9a1b76a369a4cd7425731e5ae5494e7d91cd618486415a2f7b8385dc299bec9192265ad62176a329628aacf2a928654d413f

  • SSDEEP

    3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhx:gExhk7rh7NEOIYWlPM6r6x

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      e1dd9f93d95a85af03b136f420884518_JaffaCakes118

    • Size

      192KB

    • MD5

      e1dd9f93d95a85af03b136f420884518

    • SHA1

      5006e9c467ac8e1d432590db24ab98e3668644ca

    • SHA256

      c1bb46519446a732665bf0bff9bf3f0b64ee57b909e65019521e98f5d0b3e65b

    • SHA512

      b4d9928b72b25fae0ea88637235c9a1b76a369a4cd7425731e5ae5494e7d91cd618486415a2f7b8385dc299bec9192265ad62176a329628aacf2a928654d413f

    • SSDEEP

      3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhx:gExhk7rh7NEOIYWlPM6r6x

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks