Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.398999460d5e285dd9687ad135fb4fb0.exe

  • Size

    74KB

  • Sample

    231103-k3kltsfb4v

  • MD5

    398999460d5e285dd9687ad135fb4fb0

  • SHA1

    7b102b2a42c206d6221d3da85e3c4d5c0f7cff71

  • SHA256

    b698a8d882738db06f6612192e1c9fa133a6d7b900e3855765fb1b0327131d3a

  • SHA512

    b5c04cc5fef0aec3590082925d92ae05ac85cb621a227827aaae671d9fea5e177ec86adfff71167217341410a23e1af7968db779068ab4309a897f929cfaf4f3

  • SSDEEP

    1536:N9KbClKpPaKIqaqnEXOWinTLi94xdq4yY5lBqGu1:N9UClKp+qaqnE+fvGU6qE1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      NEAS.398999460d5e285dd9687ad135fb4fb0.exe

    • Size

      74KB

    • MD5

      398999460d5e285dd9687ad135fb4fb0

    • SHA1

      7b102b2a42c206d6221d3da85e3c4d5c0f7cff71

    • SHA256

      b698a8d882738db06f6612192e1c9fa133a6d7b900e3855765fb1b0327131d3a

    • SHA512

      b5c04cc5fef0aec3590082925d92ae05ac85cb621a227827aaae671d9fea5e177ec86adfff71167217341410a23e1af7968db779068ab4309a897f929cfaf4f3

    • SSDEEP

      1536:N9KbClKpPaKIqaqnEXOWinTLi94xdq4yY5lBqGu1:N9UClKp+qaqnE+fvGU6qE1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks