Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.8bd4ccc2173cf85bc191a7f084363960_JC.exe

  • Size

    176KB

  • Sample

    231103-rj89eaee65

  • MD5

    8bd4ccc2173cf85bc191a7f084363960

  • SHA1

    900004717293acb7822fb304bc67fb3950139daf

  • SHA256

    8ba61061e2d0eafdb65f9b48746b225b97a08aa57c01999e9f7bafb320bcdc0c

  • SHA512

    d430eeffe104365c1598d8a8b728b187c0908908fcc12713c5c2417dfdb9883da95befedb5c987adef2412f69e00072e3b6433af70d31bca9da1289d00e88956

  • SSDEEP

    1536:Jv+x0V7eqzdYntSfGx+nAL2PdIkDNEnLAE0UtQgNMy3mvTtdK0vu5zypEh/tQX:IyVnYntSzWxnLj0OQg0tcau5zypEhFQX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

121.88.5.184

218.54.28.139

Targets

    • Target

      NEAS.8bd4ccc2173cf85bc191a7f084363960_JC.exe

    • Size

      176KB

    • MD5

      8bd4ccc2173cf85bc191a7f084363960

    • SHA1

      900004717293acb7822fb304bc67fb3950139daf

    • SHA256

      8ba61061e2d0eafdb65f9b48746b225b97a08aa57c01999e9f7bafb320bcdc0c

    • SHA512

      d430eeffe104365c1598d8a8b728b187c0908908fcc12713c5c2417dfdb9883da95befedb5c987adef2412f69e00072e3b6433af70d31bca9da1289d00e88956

    • SSDEEP

      1536:Jv+x0V7eqzdYntSfGx+nAL2PdIkDNEnLAE0UtQgNMy3mvTtdK0vu5zypEh/tQX:IyVnYntSzWxnLj0OQg0tcau5zypEhFQX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks