Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3aN

  • Size

    77KB

  • Sample

    241019-gxhnha1emf

  • MD5

    bca760b18a6a289ac9c7472b239f48c0

  • SHA1

    b0ad35fb2654e68f68fda67340564dcfe5fdae4d

  • SHA256

    d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3a

  • SHA512

    63b7b58d5d3eecfad4313ed53ed1c1122b9b21ed9ae06efab6558dba59145228bc0582e7cadc1f74c67d0636e670736519479bebe54cc0507f0247737457a3f6

  • SSDEEP

    768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdo:xce4ZKAvTwTcshJDzo9LHyUYmdGT/TC+

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3aN

    • Size

      77KB

    • MD5

      bca760b18a6a289ac9c7472b239f48c0

    • SHA1

      b0ad35fb2654e68f68fda67340564dcfe5fdae4d

    • SHA256

      d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3a

    • SHA512

      63b7b58d5d3eecfad4313ed53ed1c1122b9b21ed9ae06efab6558dba59145228bc0582e7cadc1f74c67d0636e670736519479bebe54cc0507f0247737457a3f6

    • SSDEEP

      768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdo:xce4ZKAvTwTcshJDzo9LHyUYmdGT/TC+

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks