Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d63b2a55540458efae28ef1195bb63b1_JaffaCakes118

  • Size

    453KB

  • Sample

    240909-nq2alayaja

  • MD5

    d63b2a55540458efae28ef1195bb63b1

  • SHA1

    33abd01baa25a515d21627f4f276f3c4e260ad8b

  • SHA256

    4081085f66c8e022b8e55822166f872dad6c66221f46ef579567cd9e07b6c9dc

  • SHA512

    8f1b3c5055d65bf3902c85a9b6381c2348645886a8dfbe5e13230d1783174843e4ad949d330b1d31347f2dee909fa78101f3a20bb11194d437c6f49cf59dd3a7

  • SSDEEP

    6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnd:CMpASIcWYx2U6hAJQnm

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      d63b2a55540458efae28ef1195bb63b1_JaffaCakes118

    • Size

      453KB

    • MD5

      d63b2a55540458efae28ef1195bb63b1

    • SHA1

      33abd01baa25a515d21627f4f276f3c4e260ad8b

    • SHA256

      4081085f66c8e022b8e55822166f872dad6c66221f46ef579567cd9e07b6c9dc

    • SHA512

      8f1b3c5055d65bf3902c85a9b6381c2348645886a8dfbe5e13230d1783174843e4ad949d330b1d31347f2dee909fa78101f3a20bb11194d437c6f49cf59dd3a7

    • SSDEEP

      6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTnd:CMpASIcWYx2U6hAJQnm

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks