Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3bf856787265c276f1b387260490a624c695a89acd8ad13224921c74b35ca6e2.exe

  • Size

    336KB

  • Sample

    250122-anpbcsylby

  • MD5

    a1246170ccb42139318a969ff4076a48

  • SHA1

    3d745e381c7bcec28799299b36c0350468e67916

  • SHA256

    3bf856787265c276f1b387260490a624c695a89acd8ad13224921c74b35ca6e2

  • SHA512

    8fdc34d068efc06cab9653b9d7df49ad60d2980acc1731b4b9ddefb1f84da9971657c7d3bc5509d9dbf6ee3b0185c838115c11247caa4cbedb68efa75ed461ee

  • SSDEEP

    6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKofw:vHW138/iXWlK885rKlGSekcj66ciN

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

218.54.31.166

Targets

    • Target

      3bf856787265c276f1b387260490a624c695a89acd8ad13224921c74b35ca6e2.exe

    • Size

      336KB

    • MD5

      a1246170ccb42139318a969ff4076a48

    • SHA1

      3d745e381c7bcec28799299b36c0350468e67916

    • SHA256

      3bf856787265c276f1b387260490a624c695a89acd8ad13224921c74b35ca6e2

    • SHA512

      8fdc34d068efc06cab9653b9d7df49ad60d2980acc1731b4b9ddefb1f84da9971657c7d3bc5509d9dbf6ee3b0185c838115c11247caa4cbedb68efa75ed461ee

    • SSDEEP

      6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcKofw:vHW138/iXWlK885rKlGSekcj66ciN

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks