Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

  • Size

    334KB

  • Sample

    241013-dw8lrawhmb

  • MD5

    d06332b00b98add142bc2aac5c94a0f2

  • SHA1

    86258a7f35b74d6c62f5e2ae7ec05cacfb105012

  • SHA256

    cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

  • SHA512

    7a18fa80b1cae818a595adf9be937562e8148ca189b8ee785fef5a24a56f2ecf3641ca5a2096377e88a8ed8248a691c0b4bf7a93fe9cb13c1c997393b8645373

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYp:vHW138/iXWlK885rKlGSekcj66ciE

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

    • Size

      334KB

    • MD5

      d06332b00b98add142bc2aac5c94a0f2

    • SHA1

      86258a7f35b74d6c62f5e2ae7ec05cacfb105012

    • SHA256

      cdc72bfc25a430298f4da6a6d3f3327cf5fe76b809dbe07e17c649d63741733c

    • SHA512

      7a18fa80b1cae818a595adf9be937562e8148ca189b8ee785fef5a24a56f2ecf3641ca5a2096377e88a8ed8248a691c0b4bf7a93fe9cb13c1c997393b8645373

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYp:vHW138/iXWlK885rKlGSekcj66ciE

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks