Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    638f92eac95ee5cf4fb438cec58c7235_JaffaCakes118

  • Size

    184KB

  • Sample

    241020-wgwbzs1gpc

  • MD5

    638f92eac95ee5cf4fb438cec58c7235

  • SHA1

    770b0c3a6e6d19c881dfc01aafae550038486883

  • SHA256

    648ec7563e3c4ad14a66110b3316bc87f35b9df396408dea08464438047ca958

  • SHA512

    8c7bc4a216271c39d67f4708d939d5e0c28b216a4a6b242e884ebc3a908a5e55444269048d0a164da0b090961bcae6fd6ce29b0a87455de5db20f27d7760e91f

  • SSDEEP

    3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFc1:2mvqeP33AYFIN9treHe1

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      638f92eac95ee5cf4fb438cec58c7235_JaffaCakes118

    • Size

      184KB

    • MD5

      638f92eac95ee5cf4fb438cec58c7235

    • SHA1

      770b0c3a6e6d19c881dfc01aafae550038486883

    • SHA256

      648ec7563e3c4ad14a66110b3316bc87f35b9df396408dea08464438047ca958

    • SHA512

      8c7bc4a216271c39d67f4708d939d5e0c28b216a4a6b242e884ebc3a908a5e55444269048d0a164da0b090961bcae6fd6ce29b0a87455de5db20f27d7760e91f

    • SSDEEP

      3072:u3mvqCDm+W03RB5eUp6UlD/mUKissApfA6y4YHFc1:2mvqeP33AYFIN9treHe1

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks