Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.960a853009a4ca5b1363707f13512181_JC.exe

  • Size

    174KB

  • Sample

    231101-wzw18sdd37

  • MD5

    960a853009a4ca5b1363707f13512181

  • SHA1

    49f75ae83644fa8a2f091afcf7922e835caa5cc3

  • SHA256

    690019240cab2c2a34a2da793bb384bd13ea2dceefc6608e74b36b2621c51507

  • SHA512

    8cbf45c97aaca9b76f8f3e67bc8539f00ce3d5e92a5cb3e70bdd740092d0dd66802d99cc4b51f10b4a0df60d20d7aac795c65165d6c7e6a7025acd5656864b56

  • SSDEEP

    1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pvUND:SuYndSW7gILCLIPtqVu5DqpxhzvUND

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

218.54.28.139

Targets

    • Target

      NEAS.960a853009a4ca5b1363707f13512181_JC.exe

    • Size

      174KB

    • MD5

      960a853009a4ca5b1363707f13512181

    • SHA1

      49f75ae83644fa8a2f091afcf7922e835caa5cc3

    • SHA256

      690019240cab2c2a34a2da793bb384bd13ea2dceefc6608e74b36b2621c51507

    • SHA512

      8cbf45c97aaca9b76f8f3e67bc8539f00ce3d5e92a5cb3e70bdd740092d0dd66802d99cc4b51f10b4a0df60d20d7aac795c65165d6c7e6a7025acd5656864b56

    • SSDEEP

      1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pvUND:SuYndSW7gILCLIPtqVu5DqpxhzvUND

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks