Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    962f0b089380f0c2f49d7ebfbb2ac857766698c0fca0d4bd9919572dc9b51c58.exe

  • Size

    94KB

  • Sample

    250121-2q3ejsvmbt

  • MD5

    ac33f7fadbdc4830ac9aa3572e69cfbe

  • SHA1

    4e024b5771443c3636d26d72fc2cbec12c2c9aac

  • SHA256

    962f0b089380f0c2f49d7ebfbb2ac857766698c0fca0d4bd9919572dc9b51c58

  • SHA512

    a521074c5bdd8e2302f3fc8019e4fc8a27f208fe6e9148961855f1d30dd27a6fc52dcf8d835e5684b4a9cea2c6ce20a46bda2229a8dcb987566b99e7f28275d9

  • SSDEEP

    768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mk:tWzhtJbUgHoADDIx1hLfuJrk

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      962f0b089380f0c2f49d7ebfbb2ac857766698c0fca0d4bd9919572dc9b51c58.exe

    • Size

      94KB

    • MD5

      ac33f7fadbdc4830ac9aa3572e69cfbe

    • SHA1

      4e024b5771443c3636d26d72fc2cbec12c2c9aac

    • SHA256

      962f0b089380f0c2f49d7ebfbb2ac857766698c0fca0d4bd9919572dc9b51c58

    • SHA512

      a521074c5bdd8e2302f3fc8019e4fc8a27f208fe6e9148961855f1d30dd27a6fc52dcf8d835e5684b4a9cea2c6ce20a46bda2229a8dcb987566b99e7f28275d9

    • SSDEEP

      768:tp0ti4HnnhtwYbJy6rioyelmd1TzulQEDDPOwc5n5uNCT/jhhLBxQIwqepJZU9mk:tWzhtJbUgHoADDIx1hLfuJrk

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks