Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    603fefbc9514700ab6caa7c483cd18b1_JaffaCakes118

  • Size

    89KB

  • Sample

    241020-eksltsxgkb

  • MD5

    603fefbc9514700ab6caa7c483cd18b1

  • SHA1

    33d3f937782106091bbb88e6546e879b14dc09de

  • SHA256

    87d95a2d411182ebc1e229d6f3c5de943751166037b0f4deb602bba07062d58e

  • SHA512

    ad38f541f28cfa34df3beedb574e4022ec218e0103856c7f6f1ac87fa371a1649605e5df022fc72e5b8e5d7c297d58cdd0765d206f1047292a633b73eb4014f7

  • SSDEEP

    1536:Zwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M4:ZqV9MziU4piRun7C3CP3M4

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.208

112.175.88.209

112.175.88.207

Targets

    • Target

      603fefbc9514700ab6caa7c483cd18b1_JaffaCakes118

    • Size

      89KB

    • MD5

      603fefbc9514700ab6caa7c483cd18b1

    • SHA1

      33d3f937782106091bbb88e6546e879b14dc09de

    • SHA256

      87d95a2d411182ebc1e229d6f3c5de943751166037b0f4deb602bba07062d58e

    • SHA512

      ad38f541f28cfa34df3beedb574e4022ec218e0103856c7f6f1ac87fa371a1649605e5df022fc72e5b8e5d7c297d58cdd0765d206f1047292a633b73eb4014f7

    • SSDEEP

      1536:Zwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M4:ZqV9MziU4piRun7C3CP3M4

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks