Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    72aece57191774ee8faa706df2fb668f

  • Size

    401KB

  • Sample

    240124-wl132aehd7

  • MD5

    72aece57191774ee8faa706df2fb668f

  • SHA1

    0a397db178732b4d0e3e1ca8567ab8f08de89b93

  • SHA256

    665c0f4b784ab387fba7f945059dad5b8462b0ccffa96f2110ea673dabdd2044

  • SHA512

    6c547649fb3058cfbea61cd05df8f9ad222abb1213687f9f2d5ac7dad10f05c0c7b6bf2f4edd50b181b2cfe17c663a99e3fcc5d215e7e803334d9592d1af8bfa

  • SSDEEP

    6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohW:8IfBoDWoyFblU6hAJQnO0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      72aece57191774ee8faa706df2fb668f

    • Size

      401KB

    • MD5

      72aece57191774ee8faa706df2fb668f

    • SHA1

      0a397db178732b4d0e3e1ca8567ab8f08de89b93

    • SHA256

      665c0f4b784ab387fba7f945059dad5b8462b0ccffa96f2110ea673dabdd2044

    • SHA512

      6c547649fb3058cfbea61cd05df8f9ad222abb1213687f9f2d5ac7dad10f05c0c7b6bf2f4edd50b181b2cfe17c663a99e3fcc5d215e7e803334d9592d1af8bfa

    • SSDEEP

      6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohW:8IfBoDWoyFblU6hAJQnO0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks