Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45N

  • Size

    89KB

  • Sample

    241019-h224dawark

  • MD5

    89cabdf181ab420194557fafe276e480

  • SHA1

    4ac6d8510f389cc7c9bee9a588183b6180042610

  • SHA256

    a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45

  • SHA512

    fabf69000eeb7f34cae941a7a3f467042d7c89cb6aa6b8a03c296d14518c1a7645d5e8f3165371264edc6fe0ab6eba94c9d0c6c6d82f7ce8d8ef37d6ebda768d

  • SSDEEP

    1536:Ywhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3Mz:YqV9MziU4piRun7C3CP3Mz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45N

    • Size

      89KB

    • MD5

      89cabdf181ab420194557fafe276e480

    • SHA1

      4ac6d8510f389cc7c9bee9a588183b6180042610

    • SHA256

      a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45

    • SHA512

      fabf69000eeb7f34cae941a7a3f467042d7c89cb6aa6b8a03c296d14518c1a7645d5e8f3165371264edc6fe0ab6eba94c9d0c6c6d82f7ce8d8ef37d6ebda768d

    • SSDEEP

      1536:Ywhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3Mz:YqV9MziU4piRun7C3CP3Mz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks