Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cde09a0f2b6d648cc015d8daac07a440

  • Size

    49KB

  • Sample

    231222-r8wplsdgej

  • MD5

    cde09a0f2b6d648cc015d8daac07a440

  • SHA1

    72eeb73ffd274e997234b2a681536f1f76e88600

  • SHA256

    80a336845b1abc6b88bf47887b56344b8859a5a289fe3f037ea70e7b9e466280

  • SHA512

    f47472a77a014ac647a4ecd80f7c8e90b20f359371d529b4d51defbda05e3b435b442f15fa2800df1d5102a5a06b36f56e82a3ef67a50727da13bfc94a9bbfae

  • SSDEEP

    1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnt:It7R8fU6n8t

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      cde09a0f2b6d648cc015d8daac07a440

    • Size

      49KB

    • MD5

      cde09a0f2b6d648cc015d8daac07a440

    • SHA1

      72eeb73ffd274e997234b2a681536f1f76e88600

    • SHA256

      80a336845b1abc6b88bf47887b56344b8859a5a289fe3f037ea70e7b9e466280

    • SHA512

      f47472a77a014ac647a4ecd80f7c8e90b20f359371d529b4d51defbda05e3b435b442f15fa2800df1d5102a5a06b36f56e82a3ef67a50727da13bfc94a9bbfae

    • SSDEEP

      1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnt:It7R8fU6n8t

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks