Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.eabda63709aedf897a37dba81599a9baexe_JC.exe

  • Size

    430KB

  • Sample

    231006-rke2yscf5w

  • MD5

    eabda63709aedf897a37dba81599a9ba

  • SHA1

    5b83a8631b27ae97b06e903db99f199f1772f965

  • SHA256

    fe27b50ba044b933e6bf7b4c0a39bf9b175b44604d784ea6e83f86a1e8e936fb

  • SHA512

    4f01469e07e9b385e1f996a3ea691ae9f920c71526788d56fc43770ebb78abedbe89e3795878970f8a0b15164f918e4b193087ea304625852eb417be4aeb14d8

  • SSDEEP

    6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpd:iMpASIcWYx2U6hAJQnG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      NEAS.eabda63709aedf897a37dba81599a9baexe_JC.exe

    • Size

      430KB

    • MD5

      eabda63709aedf897a37dba81599a9ba

    • SHA1

      5b83a8631b27ae97b06e903db99f199f1772f965

    • SHA256

      fe27b50ba044b933e6bf7b4c0a39bf9b175b44604d784ea6e83f86a1e8e936fb

    • SHA512

      4f01469e07e9b385e1f996a3ea691ae9f920c71526788d56fc43770ebb78abedbe89e3795878970f8a0b15164f918e4b193087ea304625852eb417be4aeb14d8

    • SSDEEP

      6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpd:iMpASIcWYx2U6hAJQnG

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks