Analysis
-
max time kernel
2s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
02/01/2024, 15:12
General
-
Target
ae46ca4ee7c3588b5ee8a6126cacc756.exe
-
Size
77KB
-
MD5
ae46ca4ee7c3588b5ee8a6126cacc756
-
SHA1
188021cdc653b6f4e1f2eaf825fba6080a01e16f
-
SHA256
16b1de2201d05a1cb9448266633196dc31cba6a7beaa86afd05f1bfc77119644
-
SHA512
3184131ac1fec4afa5f5b6c0dc6287835c12b3a27f62181fcc097a9e079669474fed63af956fa180f2a7e3e3075ed721ca19823327028bf51b768b4c923b2354
-
SSDEEP
1536:UOzC0tKyIy9nOM8e5rqYJkdpzCEw2dnU4:UO9Ro2rqYyXzCEwGd
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Signatures
-
Urelas
Urelas is a trojan targeting card games.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae46ca4ee7c3588b5ee8a6126cacc756.exe"C:\Users\Admin\AppData\Local\Temp\ae46ca4ee7c3588b5ee8a6126cacc756.exe"1⤵
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\sanfdr.bat" "2⤵
-
-
C:\Users\Admin\AppData\Local\Temp\huter.exe"C:\Users\Admin\AppData\Local\Temp\huter.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD56e0ecec5e285ac121f1bf7f3a59ce016
SHA1d432c8dd0bd3ddfffaa5a22a74c6da08172c13d7
SHA256c1df717fda579031c64433ccadbc1e471654b843121f07f4066b7793355e2dfe
SHA5129c20f07807c92a4bd1808deb68e571fd0ea26f39b6033c8f9e40c0346267aae396ba4ceac427c2daf95d855cca22f05aaeb7ad4f93bd8289972816a55d69527d
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB