General

  • Target

    f6e5af41d6a583140527a15a22b3d68c_JaffaCakes118

  • Size

    59KB

  • Sample

    241216-c1mpea1mhn

  • MD5

    f6e5af41d6a583140527a15a22b3d68c

  • SHA1

    f36b1e2527a4d9f03ac1be6a1be9b14e72efdc26

  • SHA256

    649ff02ce6096376f2f60efb4f07450c9b8cc78313f4e41f9e662467d115ad39

  • SHA512

    f33c3729144f3512bcfec8c57db882bd65f26c8de1e07c3f446603b67851e5b946950dd13303ec7d3b360180a4481e5c0420c67e9f700c02188373fcf5f1f867

  • SSDEEP

    768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdt

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      f6e5af41d6a583140527a15a22b3d68c_JaffaCakes118

    • Size

      59KB

    • MD5

      f6e5af41d6a583140527a15a22b3d68c

    • SHA1

      f36b1e2527a4d9f03ac1be6a1be9b14e72efdc26

    • SHA256

      649ff02ce6096376f2f60efb4f07450c9b8cc78313f4e41f9e662467d115ad39

    • SHA512

      f33c3729144f3512bcfec8c57db882bd65f26c8de1e07c3f446603b67851e5b946950dd13303ec7d3b360180a4481e5c0420c67e9f700c02188373fcf5f1f867

    • SSDEEP

      768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdt

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks