Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5fefd02abcdf572184b7be56309f53bb_JaffaCakes118

  • Size

    553KB

  • Sample

    241020-c1q2tstfke

  • MD5

    5fefd02abcdf572184b7be56309f53bb

  • SHA1

    67b80da4c36ac6a88b39ccb561c53ae17657af18

  • SHA256

    36f97c7f051ff804c6593b72d2eeac537b01cf705df44a5c3ea6a3925061a1a5

  • SHA512

    5be2c4e9df9d962d546585d5b68491a8f45af0a2cc0b4f087dcccfd8663f4daf0390c2340c1bd040111581114a5f03031ddcde19260b8672c789bfb6dc1035ca

  • SSDEEP

    12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlM:+rt4/NArwjs5olM

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      5fefd02abcdf572184b7be56309f53bb_JaffaCakes118

    • Size

      553KB

    • MD5

      5fefd02abcdf572184b7be56309f53bb

    • SHA1

      67b80da4c36ac6a88b39ccb561c53ae17657af18

    • SHA256

      36f97c7f051ff804c6593b72d2eeac537b01cf705df44a5c3ea6a3925061a1a5

    • SHA512

      5be2c4e9df9d962d546585d5b68491a8f45af0a2cc0b4f087dcccfd8663f4daf0390c2340c1bd040111581114a5f03031ddcde19260b8672c789bfb6dc1035ca

    • SSDEEP

      12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzlM:+rt4/NArwjs5olM

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks