Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9f2daca5bb18f82f19206b44d27ca75d6e09289012364a4a3f9b20bb6de3ebc0

  • Size

    57KB

  • Sample

    241021-bh331aseqp

  • MD5

    509aa880ada88285f66c8e41fab9a455

  • SHA1

    a410383aba86bff404be633c294177082cecae15

  • SHA256

    9f2daca5bb18f82f19206b44d27ca75d6e09289012364a4a3f9b20bb6de3ebc0

  • SHA512

    c2c5078262356d4c120df68f3a49dc1bf68ca9f3c6d2b143a9fd963df4ae486ddd0929cd087b027364bb4c97b8cff4b7d6ad7905f046a6e8122f0356d7936b1e

  • SSDEEP

    1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Z:MOemdTd1o74qlmbbJ+x+IkX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      9f2daca5bb18f82f19206b44d27ca75d6e09289012364a4a3f9b20bb6de3ebc0

    • Size

      57KB

    • MD5

      509aa880ada88285f66c8e41fab9a455

    • SHA1

      a410383aba86bff404be633c294177082cecae15

    • SHA256

      9f2daca5bb18f82f19206b44d27ca75d6e09289012364a4a3f9b20bb6de3ebc0

    • SHA512

      c2c5078262356d4c120df68f3a49dc1bf68ca9f3c6d2b143a9fd963df4ae486ddd0929cd087b027364bb4c97b8cff4b7d6ad7905f046a6e8122f0356d7936b1e

    • SSDEEP

      1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8Z:MOemdTd1o74qlmbbJ+x+IkX

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks