Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5

  • Size

    420KB

  • Sample

    240313-vnw2escd43

  • MD5

    3477f317276bf2d4ed1a92ece69b7c18

  • SHA1

    87baec845ee28b294a49dc3368de06c1a63f524f

  • SHA256

    01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5

  • SHA512

    cb5111df85eec1cd0fee5c77ebc5a09cecff07bcef19c22ae0d5abf918b8a835e68fa9faaee5a0e8c93bc38c027ac660d84b37e78a76490630e9ea0474c866cb

  • SSDEEP

    6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODGY:uU7M5ijWh0XOW4sEfeOn

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5

    • Size

      420KB

    • MD5

      3477f317276bf2d4ed1a92ece69b7c18

    • SHA1

      87baec845ee28b294a49dc3368de06c1a63f524f

    • SHA256

      01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5

    • SHA512

      cb5111df85eec1cd0fee5c77ebc5a09cecff07bcef19c22ae0d5abf918b8a835e68fa9faaee5a0e8c93bc38c027ac660d84b37e78a76490630e9ea0474c866cb

    • SSDEEP

      6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODGY:uU7M5ijWh0XOW4sEfeOn

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks