Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5cfcd8adb38de8f24e9d00b3492ccc86_JaffaCakes118

  • Size

    192KB

  • Sample

    241019-rc6vpszcmc

  • MD5

    5cfcd8adb38de8f24e9d00b3492ccc86

  • SHA1

    b0d69d43695e044d03dfba9eea63af58e674d61f

  • SHA256

    f55565628e4868db116845182a1cec78ad86014d3f0b9255d141e32fb0781e05

  • SHA512

    4e65ca151973c9d70d8468f7bc83c09fab4a72a0349621ec04a47ed23566f17bdd81fc2ca6b4f6b8544b65d7d4778ab53b14581e728d20cdf519fdfa2e1c5967

  • SSDEEP

    3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhf:gExhk7rh7NEOIYWlPM6r6f

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      5cfcd8adb38de8f24e9d00b3492ccc86_JaffaCakes118

    • Size

      192KB

    • MD5

      5cfcd8adb38de8f24e9d00b3492ccc86

    • SHA1

      b0d69d43695e044d03dfba9eea63af58e674d61f

    • SHA256

      f55565628e4868db116845182a1cec78ad86014d3f0b9255d141e32fb0781e05

    • SHA512

      4e65ca151973c9d70d8468f7bc83c09fab4a72a0349621ec04a47ed23566f17bdd81fc2ca6b4f6b8544b65d7d4778ab53b14581e728d20cdf519fdfa2e1c5967

    • SSDEEP

      3072:gAwixCZ6Sh77R2Gpf606U8v0e7OIgPDFIbbzhPM67fIhf:gExhk7rh7NEOIYWlPM6r6f

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks