Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c

  • Size

    448KB

  • Sample

    240418-yt1tcaeg61

  • MD5

    abc7af471759c348bed8520bf15295ef

  • SHA1

    08064f0d39b9422c5d7b119831ccedea872ccdab

  • SHA256

    29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c

  • SHA512

    ab1a4715c6cf1e8d2fd0b62c4d2d167ddd7de9f0bfb5bb735f11f8e4df767badfcfc1dbadb3bedecc651ec3b4dc26be202ad3425f959991a6271265a393e8818

  • SSDEEP

    6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdOS:oMpASIcWYx2U6hAJQnMh

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c

    • Size

      448KB

    • MD5

      abc7af471759c348bed8520bf15295ef

    • SHA1

      08064f0d39b9422c5d7b119831ccedea872ccdab

    • SHA256

      29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c

    • SHA512

      ab1a4715c6cf1e8d2fd0b62c4d2d167ddd7de9f0bfb5bb735f11f8e4df767badfcfc1dbadb3bedecc651ec3b4dc26be202ad3425f959991a6271265a393e8818

    • SSDEEP

      6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdOS:oMpASIcWYx2U6hAJQnMh

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks