General

  • Target

    ea893657c3807e0b517ede8a64beeac4_JaffaCakes118

  • Size

    235KB

  • Sample

    241213-h6v6matnfp

  • MD5

    ea893657c3807e0b517ede8a64beeac4

  • SHA1

    c5dabdc84044acb09983d783d884c643f04e8624

  • SHA256

    9af5d8a13760a5b69ec7af7d7851de438c4ad903c08b1b6e0e4d272425a02c52

  • SHA512

    46c141bb9de4ae7dac657d2697b0ae32f9cca66c67be5d938fe508502d9075f15bca4842e62e5aa3e7a53b4d5007bbbb1deb24c5d51c26ee1f94074ad127cbb1

  • SSDEEP

    3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2P:ZASpvo0LKkRzpxJ2kRqroiP

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      ea893657c3807e0b517ede8a64beeac4_JaffaCakes118

    • Size

      235KB

    • MD5

      ea893657c3807e0b517ede8a64beeac4

    • SHA1

      c5dabdc84044acb09983d783d884c643f04e8624

    • SHA256

      9af5d8a13760a5b69ec7af7d7851de438c4ad903c08b1b6e0e4d272425a02c52

    • SHA512

      46c141bb9de4ae7dac657d2697b0ae32f9cca66c67be5d938fe508502d9075f15bca4842e62e5aa3e7a53b4d5007bbbb1deb24c5d51c26ee1f94074ad127cbb1

    • SSDEEP

      3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2P:ZASpvo0LKkRzpxJ2kRqroiP

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks