General

  • Target

    f00b7639be1fcd4b325dba377dd68c47_JaffaCakes118

  • Size

    467KB

  • Sample

    241214-wr6wgaznax

  • MD5

    f00b7639be1fcd4b325dba377dd68c47

  • SHA1

    ce697e4bdd0551a9bf733e8b762399b12d2afc6e

  • SHA256

    f0072eebe3e4f298d81086ffc3e44df3589a56ef1e0a4ee5d8f43623fd16ef0a

  • SHA512

    46be0b99a99b41c17fc3b8434e92893e0369d064744c57589fece5abab6ec2293dea23cd2c75276d86c64033779d4a1ccc31f8ee12964ffa8e84046803634197

  • SSDEEP

    12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mg:9x9GzHlTv/b35tecFB6l

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

Targets

    • Target

      f00b7639be1fcd4b325dba377dd68c47_JaffaCakes118

    • Size

      467KB

    • MD5

      f00b7639be1fcd4b325dba377dd68c47

    • SHA1

      ce697e4bdd0551a9bf733e8b762399b12d2afc6e

    • SHA256

      f0072eebe3e4f298d81086ffc3e44df3589a56ef1e0a4ee5d8f43623fd16ef0a

    • SHA512

      46be0b99a99b41c17fc3b8434e92893e0369d064744c57589fece5abab6ec2293dea23cd2c75276d86c64033779d4a1ccc31f8ee12964ffa8e84046803634197

    • SSDEEP

      12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mg:9x9GzHlTv/b35tecFB6l

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks