Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    df3c55c2a7b88a0806ee417d666b169e623202ab41beb28f02775e7faad1d7cdN

  • Size

    79KB

  • Sample

    241020-b7msba1grd

  • MD5

    b39589f9343b509a07a49f759cb71630

  • SHA1

    918aecfca8251c09ed87ff918fe0b6e117be79f2

  • SHA256

    df3c55c2a7b88a0806ee417d666b169e623202ab41beb28f02775e7faad1d7cd

  • SHA512

    f3e0548dba15a50394bfad22347df3909eb0ede869c732a722b6b8c64355b300baf482711f268c95b3ea2ccd0d8f4e2581356a8aa14ef162058e5d43beb75ba3

  • SSDEEP

    1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8te5:4lnhYPlVMqmyAFIRRy

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.207

Targets

    • Target

      df3c55c2a7b88a0806ee417d666b169e623202ab41beb28f02775e7faad1d7cdN

    • Size

      79KB

    • MD5

      b39589f9343b509a07a49f759cb71630

    • SHA1

      918aecfca8251c09ed87ff918fe0b6e117be79f2

    • SHA256

      df3c55c2a7b88a0806ee417d666b169e623202ab41beb28f02775e7faad1d7cd

    • SHA512

      f3e0548dba15a50394bfad22347df3909eb0ede869c732a722b6b8c64355b300baf482711f268c95b3ea2ccd0d8f4e2581356a8aa14ef162058e5d43beb75ba3

    • SSDEEP

      1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8te5:4lnhYPlVMqmyAFIRRy

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks