Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01fd4daa9eaf6bcc9cfaa37efa2f3430_NeikiAnalytics

  • Size

    92KB

  • Sample

    240511-phacksff5s

  • MD5

    01fd4daa9eaf6bcc9cfaa37efa2f3430

  • SHA1

    fddfd69cb7fdec778088ed568656103c62c3e85f

  • SHA256

    8e421dd3424223564c85b6f2c8d4db7e616669f24e2ced5cafe96d69a83f8e94

  • SHA512

    fcdc4890fd25dd58648a0d6602ca130f2c61efcce12f31377b3cb2955758491e7fd1fbae5b4a1a060fffe9028b2568a443450abe189529b3bd7ba4de9350ab87

  • SSDEEP

    768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4Us:OVNSf7hyk+I6412V6PMqAax80XAFSrR+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      01fd4daa9eaf6bcc9cfaa37efa2f3430_NeikiAnalytics

    • Size

      92KB

    • MD5

      01fd4daa9eaf6bcc9cfaa37efa2f3430

    • SHA1

      fddfd69cb7fdec778088ed568656103c62c3e85f

    • SHA256

      8e421dd3424223564c85b6f2c8d4db7e616669f24e2ced5cafe96d69a83f8e94

    • SHA512

      fcdc4890fd25dd58648a0d6602ca130f2c61efcce12f31377b3cb2955758491e7fd1fbae5b4a1a060fffe9028b2568a443450abe189529b3bd7ba4de9350ab87

    • SSDEEP

      768:54pt1NSf7M9Syk+IAnTjwm41tYhZV6pudcMiDh7FOaRb8RC1J3AFLT7Dm3UIn4Us:OVNSf7hyk+I6412V6PMqAax80XAFSrR+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks