General

  • Target

    ff186b26ca84dfa3b3b5640dee15eee2_JaffaCakes118

  • Size

    782KB

  • Sample

    241219-j181zawmez

  • MD5

    ff186b26ca84dfa3b3b5640dee15eee2

  • SHA1

    3ceedd19449602df733bf34e4ad3353fef5f1da8

  • SHA256

    886308422d89cb2ace24ba34833cdea1c4270f619c1061806d78f6748fbd0d5c

  • SHA512

    97723d675be9a0508d4f346c24a5110522540158bba3391686350f2c58ad83f87174574d1a0f7db20f1aea7e24a6320cab3d50332968bc0a4887171f6d87a915

  • SSDEEP

    12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1+:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8r

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      ff186b26ca84dfa3b3b5640dee15eee2_JaffaCakes118

    • Size

      782KB

    • MD5

      ff186b26ca84dfa3b3b5640dee15eee2

    • SHA1

      3ceedd19449602df733bf34e4ad3353fef5f1da8

    • SHA256

      886308422d89cb2ace24ba34833cdea1c4270f619c1061806d78f6748fbd0d5c

    • SHA512

      97723d675be9a0508d4f346c24a5110522540158bba3391686350f2c58ad83f87174574d1a0f7db20f1aea7e24a6320cab3d50332968bc0a4887171f6d87a915

    • SSDEEP

      12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1+:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8r

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks