Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    163b93332e85582c5953c7799db7127e9a0664a46853e18fff365f8f32090d34N.exe

  • Size

    334KB

  • Sample

    241206-pv5n9axpfs

  • MD5

    092601aa9bd005c40f2ade0e114203d0

  • SHA1

    c140bdacfd57ee5ba2dbf7ad65f087dbcb04e193

  • SHA256

    163b93332e85582c5953c7799db7127e9a0664a46853e18fff365f8f32090d34

  • SHA512

    eddf969e06cf00bf81c116768830724c069f010d3a37293d6a41316fb815282d45e0690c6513102e7943b96a1637d9acff2cff6a3e691219ce5d9866dafb0957

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66ciT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      163b93332e85582c5953c7799db7127e9a0664a46853e18fff365f8f32090d34N.exe

    • Size

      334KB

    • MD5

      092601aa9bd005c40f2ade0e114203d0

    • SHA1

      c140bdacfd57ee5ba2dbf7ad65f087dbcb04e193

    • SHA256

      163b93332e85582c5953c7799db7127e9a0664a46853e18fff365f8f32090d34

    • SHA512

      eddf969e06cf00bf81c116768830724c069f010d3a37293d6a41316fb815282d45e0690c6513102e7943b96a1637d9acff2cff6a3e691219ce5d9866dafb0957

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYm:vHW138/iXWlK885rKlGSekcj66ciT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks