Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    15-10-2023 19:48

General

  • Target

    dd3bbe45a947b46f6a136b7fbaccc060_exe32.exe

  • Size

    404KB

  • MD5

    dd3bbe45a947b46f6a136b7fbaccc060

  • SHA1

    874e7edb97e43679110ce20997073bd4c64eac60

  • SHA256

    c1fb931a0c4c0c38532fe67236d95a766e0c2bff4ea4c27e84625a053f8bd0cc

  • SHA512

    35354158f3f7f701a19ff24bb14a9822d9bccaef16680228d993eda42cb3e37e60c9fd1c5f184b3aa7d99f2d73f223f683e20da26e09a90840bc640bfb38fd4d

  • SSDEEP

    6144:GzU7blKAEeiCWhWapKRaRXOkN4Swel6f3IsInO:oU7MCijWh0XOW4sEfeO

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Signatures

  • Urelas

    Urelas is a trojan targeting card games.

Processes

  • C:\Users\Admin\AppData\Local\Temp\dd3bbe45a947b46f6a136b7fbaccc060_exe32.exe
    "C:\Users\Admin\AppData\Local\Temp\dd3bbe45a947b46f6a136b7fbaccc060_exe32.exe"
    1⤵
      PID:2232

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2232-0-0x0000000000400000-0x0000000000465000-memory.dmp

      Filesize

      404KB

    • memory/2232-1-0x0000000000400000-0x0000000000465000-memory.dmp

      Filesize

      404KB