urelas | 57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f

Analysis

max time kernel
134s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 13:36

Target

57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f_NeikiAnalytics.exe
Size

264KB
MD5

1fe679eaa5692a3b57269c6f5de830b0
SHA1

c724dd7b0e4489b7123669ae857cfc9a6b4ca61b
SHA256

57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f
SHA512

cd11cd7001898dd4a33fb0d3c98c5e7ad1f89b57aca51d713289ef9253c8e6f05d64e224da7ef8b1cbb43020a3901315f6eb086c6cf047206cf38a3fb10298e0
SSDEEP

3072:cjtLKCEze5N/YEbv9/y4cgrT2tqnkci8OcWvZWaVTx/sRaZ38wOUsPO:TzU7blKKZdiCWhWapKRaRXOhPO

Score

10^/10

urelas trojan

Family

urelas

218.54.31.226

218.54.31.165

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3076 340 WerFault.exe 57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f_NeikiAnalytics.exe

pid	pid_target	process	target process
3076	340	WerFault.exe	57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\57213bc62f4d57aa70484dad616a295d85950a6c83be2d7d26de48b5bb079e3f_NeikiAnalytics.exe"
1⤵
PID:340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 216
  2⤵
  - Program crash
  PID:3076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 340 -ip 340
1⤵
PID:4428

memory/340-0-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download