Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.6fbb9f08304493011c5f575281a17200.exe

  • Size

    77KB

  • Sample

    231105-z2dt8aee56

  • MD5

    6fbb9f08304493011c5f575281a17200

  • SHA1

    bcb7cdfd873dec0827f9436cfeb9e21e8af69468

  • SHA256

    b495a933d917284d9f35f1a013d9717c20a55bcea142ae03de6790071f0ea3d4

  • SHA512

    92d59a578e3846c8db686ab07f76c575916fddbe978428b51d8c199b271a7c289a703d1b1a0ed3e94b6316c75fc50b57c71eb0d788fa55ef6aa10dcb978395b4

  • SSDEEP

    1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2t:zLCEZTGx518E

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.28.139

121.88.5.183

Targets

    • Target

      NEAS.6fbb9f08304493011c5f575281a17200.exe

    • Size

      77KB

    • MD5

      6fbb9f08304493011c5f575281a17200

    • SHA1

      bcb7cdfd873dec0827f9436cfeb9e21e8af69468

    • SHA256

      b495a933d917284d9f35f1a013d9717c20a55bcea142ae03de6790071f0ea3d4

    • SHA512

      92d59a578e3846c8db686ab07f76c575916fddbe978428b51d8c199b271a7c289a703d1b1a0ed3e94b6316c75fc50b57c71eb0d788fa55ef6aa10dcb978395b4

    • SSDEEP

      1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2t:zLCEZTGx518E

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks