urelas | 2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f

Analysis

max time kernel
135s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 19:55

Target

2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f.exe
Size

383KB
MD5

8aa66ae5821902d8b56088474ae67c85
SHA1

15205feee995df89e528c5fb4b76593d5f3da803
SHA256

2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f
SHA512

9c83c7b6c7d3ce5e9222dda9904d4560046f91460e16665ae66be227ab1513eb45b7dd07be9cda6b3f3ad65b6ec90aacea81d552958e52351c9bff3244618f01
SSDEEP

6144:vwb/gbXb6DkDBa+uP8/JZ0nmZtCFkYLR3u4uQ7x39NnPURL:vwb/gzms0+u2H8qLcJn

Score

10^/10

urelas trojan

Family

urelas

218.54.31.226

218.54.31.165

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

60 1144 WerFault.exe 2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f.exe

pid	pid_target	process	target process
60	1144	WerFault.exe	2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f.exe

C:\Users\Admin\AppData\Local\Temp\2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f.exe
"C:\Users\Admin\AppData\Local\Temp\2d0d60e5dc6f9464c66df404405954a6a38f366c4dd2a8fb0dbd11ee811dba2f.exe"
1⤵
PID:1144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1144 -s 216
2⤵
- Program crash
PID:60

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1144 -ip 1144
1⤵
PID:4520

memory/1144-0-0x0000000000400000-0x0000000000466000-memory.dmp

Filesize
408KB

Download