General

  • Target
    jaffacakes118_9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee.bin
  • Size 150KB
  • Sample260930-lk3kcstwbt
  • SHA256 9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • urelas

C2
  • 121.88.5.184

Targets

    • Target
      jaffacakes118_9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee.bin
    • Size 150KB
    • SHA256 9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks