Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f

  • Size

    514KB

  • Sample

    241205-dt3byssjgq

  • MD5

    91b0994aae31d7a21d910f3022501e9d

  • SHA1

    53cc2876b04a7e80ef64f7c2cb8f28b4de652176

  • SHA256

    da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f

  • SHA512

    57aa2a357a9483bed17eb5bda655fd9cec4f592a649867e1aea4d89b9e723ed4be2d0219c2750317454fc098ccb310b2e42ffec3bd19c2e17a121a90e50caa72

  • SSDEEP

    12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo1:3MUv2LAv9AQ1p4dKI

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f

    • Size

      514KB

    • MD5

      91b0994aae31d7a21d910f3022501e9d

    • SHA1

      53cc2876b04a7e80ef64f7c2cb8f28b4de652176

    • SHA256

      da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f

    • SHA512

      57aa2a357a9483bed17eb5bda655fd9cec4f592a649867e1aea4d89b9e723ed4be2d0219c2750317454fc098ccb310b2e42ffec3bd19c2e17a121a90e50caa72

    • SSDEEP

      12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo1:3MUv2LAv9AQ1p4dKI

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks