General

  • Target

    e815c8a0c6954345e8a1303c19e88934_JaffaCakes118

  • Size

    449KB

  • Sample

    241212-yzp9ssyjbk

  • MD5

    e815c8a0c6954345e8a1303c19e88934

  • SHA1

    5cb5b9102f3f090aef31109f3f652312eef86973

  • SHA256

    262e25b7a634e6da624afb712b8c05f1413461b4b013b4955affedc8bfa3d01e

  • SHA512

    0fc66f8ff2cab495636b68ff406b859fe8059cf2b0856f721bfff13f6eb72efbafb7ba55a6ce4e33d317778117b58a19eaf9d48168930dba4dd2e9940b4d27fe

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFt:CMpASIcWYx2U6hAJQnS

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      e815c8a0c6954345e8a1303c19e88934_JaffaCakes118

    • Size

      449KB

    • MD5

      e815c8a0c6954345e8a1303c19e88934

    • SHA1

      5cb5b9102f3f090aef31109f3f652312eef86973

    • SHA256

      262e25b7a634e6da624afb712b8c05f1413461b4b013b4955affedc8bfa3d01e

    • SHA512

      0fc66f8ff2cab495636b68ff406b859fe8059cf2b0856f721bfff13f6eb72efbafb7ba55a6ce4e33d317778117b58a19eaf9d48168930dba4dd2e9940b4d27fe

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFt:CMpASIcWYx2U6hAJQnS

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks