General

  • Target

    e9ee4b6aa74639e8828bc4a855738e2b_JaffaCakes118

  • Size

    264KB

  • Sample

    241213-e99lmszqel

  • MD5

    e9ee4b6aa74639e8828bc4a855738e2b

  • SHA1

    c3de0da45b74cb2e2fe366048f2272ac54950843

  • SHA256

    c7ce8e90ff659501b6ce2c4c76b2a753ae5ac6b48825b3cc259c05af4293fb12

  • SHA512

    61617ac90a7fb16ea8ebd14d2a5f52c01d56610fb5051b7653a18de28ad451f9a9a9c41173736c570fafd3205f77737fac680aece684258d70cf064cd72b43e3

  • SSDEEP

    3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANakD:ASeyGpTaesaQUufkL57YsL9NIx9ANae

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      e9ee4b6aa74639e8828bc4a855738e2b_JaffaCakes118

    • Size

      264KB

    • MD5

      e9ee4b6aa74639e8828bc4a855738e2b

    • SHA1

      c3de0da45b74cb2e2fe366048f2272ac54950843

    • SHA256

      c7ce8e90ff659501b6ce2c4c76b2a753ae5ac6b48825b3cc259c05af4293fb12

    • SHA512

      61617ac90a7fb16ea8ebd14d2a5f52c01d56610fb5051b7653a18de28ad451f9a9a9c41173736c570fafd3205f77737fac680aece684258d70cf064cd72b43e3

    • SSDEEP

      3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANakD:ASeyGpTaesaQUufkL57YsL9NIx9ANae

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks