Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

10c15bdd82...dd.exe

windows7-x64

10

10c15bdd82...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd

  • Size

    333KB

  • Sample

    241019-w8h6qs1eke

  • MD5

    81fb5c594e507ec60907d87eb01ba90f

  • SHA1

    74bef14e571f66d549433d9258ac58a0e1519446

  • SHA256

    10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd

  • SHA512

    ea4c3b96f7aa361d66bde76aac090e5db4d57e15543f139ad33282d753fb4784ca6e850dcb4ac7083a78c4116310ca48647f8bf25c2d1f7e593a4e46215b4b68

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPUz:vHW138/iXWlK885rKlGSekcj66ciBz

Score
10/10
urelasdiscoverytrojan

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd

    • Size

      333KB

    • MD5

      81fb5c594e507ec60907d87eb01ba90f

    • SHA1

      74bef14e571f66d549433d9258ac58a0e1519446

    • SHA256

      10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd

    • SHA512

      ea4c3b96f7aa361d66bde76aac090e5db4d57e15543f139ad33282d753fb4784ca6e850dcb4ac7083a78c4116310ca48647f8bf25c2d1f7e593a4e46215b4b68

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPUz:vHW138/iXWlK885rKlGSekcj66ciBz

    Score
    10/10
    urelasdiscoverytrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks