Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b6cf01e063e6370d0ca1455ad65dd58b5aa608779804229e846742b5a12c8691.exe

  • Size

    334KB

  • Sample

    241205-rhryqstpdr

  • MD5

    48c754b5a0b4931fb08ad6a060c6f3c5

  • SHA1

    3056f95cc54e0a8ee01bb930e279e876c4bc1c45

  • SHA256

    b6cf01e063e6370d0ca1455ad65dd58b5aa608779804229e846742b5a12c8691

  • SHA512

    bb175497b013686162ce71fb8112f16b4ab0746357612fd0fa9406b727ff3907ef7ec96459e3e05163e380cb84bd6a737667299c2ccea65df5579df9071d6b94

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9U:vHW138/iXWlK885rKlGSekcj66ciIU

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      b6cf01e063e6370d0ca1455ad65dd58b5aa608779804229e846742b5a12c8691.exe

    • Size

      334KB

    • MD5

      48c754b5a0b4931fb08ad6a060c6f3c5

    • SHA1

      3056f95cc54e0a8ee01bb930e279e876c4bc1c45

    • SHA256

      b6cf01e063e6370d0ca1455ad65dd58b5aa608779804229e846742b5a12c8691

    • SHA512

      bb175497b013686162ce71fb8112f16b4ab0746357612fd0fa9406b727ff3907ef7ec96459e3e05163e380cb84bd6a737667299c2ccea65df5579df9071d6b94

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9U:vHW138/iXWlK885rKlGSekcj66ciIU

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks