Analysis

  • max time kernel
    140s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/03/2024, 22:12

General

  • Target

    903dfc21274d4368b1670a1b308ae7ebfaeb39b33d60b4b2fc1c13b9b0366efa.exe

  • Size

    442KB

  • MD5

    d80d5435b06be892e95b864f4e51af1f

  • SHA1

    3ce543688e3befe4df0aa96fa01d7e95077271b9

  • SHA256

    903dfc21274d4368b1670a1b308ae7ebfaeb39b33d60b4b2fc1c13b9b0366efa

  • SHA512

    14900f79dcd3cc0ef0ca5f5e37918982ad4ff6bd1c482695f2f87ae8caaf785c11fb7221eb2953905552f4d3bc04ce71010ee6bc0f67fd05b834043272f3399f

  • SSDEEP

    12288:PRMJysYCl64dH0JlJnERCoa8+yx5Yk7SPTANgLMt:PRzkF2o5x6RrAyQ

Score
10/10

Malware Config

Signatures

  • Urelas

    Urelas is a trojan targeting card games.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\903dfc21274d4368b1670a1b308ae7ebfaeb39b33d60b4b2fc1c13b9b0366efa.exe
    "C:\Users\Admin\AppData\Local\Temp\903dfc21274d4368b1670a1b308ae7ebfaeb39b33d60b4b2fc1c13b9b0366efa.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2924-0-0x0000000000A70000-0x0000000000B71000-memory.dmp

          Filesize

          1.0MB

        • memory/2924-1-0x0000000000A70000-0x0000000000B71000-memory.dmp

          Filesize

          1.0MB