Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.d9e673a4483626cf1234b34de1d251feexe_JC.exe

  • Size

    209KB

  • Sample

    231006-q4fbdsec46

  • MD5

    d9e673a4483626cf1234b34de1d251fe

  • SHA1

    afc6a0104e63b5c6c69bcc2153943a789df5bea7

  • SHA256

    ebbf37404e5ca10eef0a9149b8c9cb7762beccaa453de116a0cb9afad1c269e0

  • SHA512

    f96b45f23a24406669d6ee9c0690ae1f13bd9049e1e69313845115ca496a9ca118cfbead773a76e205715c62baf3b5aacc16bf23d5803642451b86569b4c7c1a

  • SSDEEP

    1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcRBRV:PuchogM57bIL+eb61TVa+3MJb6A7

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      NEAS.d9e673a4483626cf1234b34de1d251feexe_JC.exe

    • Size

      209KB

    • MD5

      d9e673a4483626cf1234b34de1d251fe

    • SHA1

      afc6a0104e63b5c6c69bcc2153943a789df5bea7

    • SHA256

      ebbf37404e5ca10eef0a9149b8c9cb7762beccaa453de116a0cb9afad1c269e0

    • SHA512

      f96b45f23a24406669d6ee9c0690ae1f13bd9049e1e69313845115ca496a9ca118cfbead773a76e205715c62baf3b5aacc16bf23d5803642451b86569b4c7c1a

    • SSDEEP

      1536:1BucKHs7K2HEG7BpoWiZBYHs977q+7INVdU2Aneb61TVcz+3MJb6rcRBRV:PuchogM57bIL+eb61TVa+3MJb6A7

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks