Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    97aab0a912875f65ae91d3d67e5b4541

  • Size

    441KB

  • Sample

    231222-qbtnbadfbp

  • MD5

    97aab0a912875f65ae91d3d67e5b4541

  • SHA1

    dff953da77d139e9f7ecd6292d548d1df0cf46cf

  • SHA256

    43a6dbabf9d91478c9763b315004b2066d4f8dd539c223a0813cbba409253c96

  • SHA512

    23c9033497f6337811e878f24b43a64f6e3065699d60d31b803b93796988ec186ecfe69c699b11da5322efe0e4f8da7cd5c4c198009db8149315f63f47e40714

  • SSDEEP

    6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMRJ2:rKf1PyKa2H3hOHOHz9JQ6zBGI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.165

218.54.31.226

Targets

    • Target

      97aab0a912875f65ae91d3d67e5b4541

    • Size

      441KB

    • MD5

      97aab0a912875f65ae91d3d67e5b4541

    • SHA1

      dff953da77d139e9f7ecd6292d548d1df0cf46cf

    • SHA256

      43a6dbabf9d91478c9763b315004b2066d4f8dd539c223a0813cbba409253c96

    • SHA512

      23c9033497f6337811e878f24b43a64f6e3065699d60d31b803b93796988ec186ecfe69c699b11da5322efe0e4f8da7cd5c4c198009db8149315f63f47e40714

    • SSDEEP

      6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMRJ2:rKf1PyKa2H3hOHOHz9JQ6zBGI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks