Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0001520a394d9725b7b51f73de475b71_JC.exe

  • Size

    97KB

  • Sample

    231011-xe1z5agf44

  • MD5

    0001520a394d9725b7b51f73de475b71

  • SHA1

    b68b50a6d7bb32b21748edbb00096488d4d13ba8

  • SHA256

    f3a06452b21736720e832ebc2267990eb02d7a01bde7b2711774b39f47235156

  • SHA512

    64d9738a2b59c8396dabeec425ef2bc2ebbc5e1a38d507c7f931b0e6964a24a88b545a806808ac15cf06babbfb49ec466bf648428c4ebbfc13583204eed07fe9

  • SSDEEP

    1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRV8:SSf9yk+U2V63XAFSrRC

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      0001520a394d9725b7b51f73de475b71_JC.exe

    • Size

      97KB

    • MD5

      0001520a394d9725b7b51f73de475b71

    • SHA1

      b68b50a6d7bb32b21748edbb00096488d4d13ba8

    • SHA256

      f3a06452b21736720e832ebc2267990eb02d7a01bde7b2711774b39f47235156

    • SHA512

      64d9738a2b59c8396dabeec425ef2bc2ebbc5e1a38d507c7f931b0e6964a24a88b545a806808ac15cf06babbfb49ec466bf648428c4ebbfc13583204eed07fe9

    • SSDEEP

      1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRV8:SSf9yk+U2V63XAFSrRC

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks