Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    df6a781391ce6eb5a6ecf2984801ce388f26d12cc3b2ba22bfded5e2428e3f5e

  • Size

    332KB

  • Sample

    241021-epvlzsxejd

  • MD5

    bf9d60c4122595940562f244a5d5b435

  • SHA1

    b86aab43d8fe55949c3a08a8e83e11fc6526c4f0

  • SHA256

    df6a781391ce6eb5a6ecf2984801ce388f26d12cc3b2ba22bfded5e2428e3f5e

  • SHA512

    c03a67010b85594f7f44a17f336254324719c44b4321d7f7eb941d96c95154b1d9d43a0c9f85d99e5b03b46409cf03ecc21ca466afe1aba3e65b09d4aa57a959

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      df6a781391ce6eb5a6ecf2984801ce388f26d12cc3b2ba22bfded5e2428e3f5e

    • Size

      332KB

    • MD5

      bf9d60c4122595940562f244a5d5b435

    • SHA1

      b86aab43d8fe55949c3a08a8e83e11fc6526c4f0

    • SHA256

      df6a781391ce6eb5a6ecf2984801ce388f26d12cc3b2ba22bfded5e2428e3f5e

    • SHA512

      c03a67010b85594f7f44a17f336254324719c44b4321d7f7eb941d96c95154b1d9d43a0c9f85d99e5b03b46409cf03ecc21ca466afe1aba3e65b09d4aa57a959

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYl:vHW138/iXWlK885rKlGSekcj66ciI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks