Overview

overview

10

Static

static

10

65c6e7c15b...18.exe

windows7-x64

10

65c6e7c15b...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 02:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65c6e7c15bd526a408a9e72c066308c6_JaffaCakes118.exe

  • Size

    476KB

  • MD5

    65c6e7c15bd526a408a9e72c066308c6

  • SHA1

    f88598dca96506052441418eb50974d86cdb0008

  • SHA256

    a7e5ca6a4db0dbb844c2e0e33671834b108dd25b4a64de5cc24f5bb74da1cd50

  • SHA512

    9bdebed3c5a2dc779155c5ce629c3125af01286a9f159d2e5e0c60c735b296915e5e43b4af1adf5bd038d58d608c7b90623e17133613e5a58b4491e649fac3e7

  • SSDEEP

    6144:LqXAoQT5Tr9R0HN/3w36EnCYLTcz6MY5NYnE/QhyjxJBErrZAWkPW5oeNtLjph:mQRI/3w36EnCYcFE/iydJai/WZtn

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

218.54.31.165

Signatures

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\65c6e7c15bd526a408a9e72c066308c6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\65c6e7c15bd526a408a9e72c066308c6_JaffaCakes118.exe"
    1⤵
      PID:816
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 816 -s 468
        2⤵
        • Program crash
        PID:1000
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 816 -ip 816
      1⤵
        PID:1936

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/816-0-0x0000000000A40000-0x0000000000ABF000-memory.dmp
        Filesize

        508KB

        Download