urelas | 97958abebfd24c91dace61a9d6e2940da87de3a5d8e8c7c17b0d4e746c6704a7

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 13:36

Target

42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe
Size

440KB
MD5

42030236e2d5d3f93eb27cf3cecbd030
SHA1

e7694d17d8c2586ea9fe7a6cb34ed5c7eb072f44
SHA256

97958abebfd24c91dace61a9d6e2940da87de3a5d8e8c7c17b0d4e746c6704a7
SHA512

f23096bf01282cb9c3da4def29c5e4624c69fc25b71c892652cdeb309818bf0db0573cb90478017657fe6fe747b043bf126fe4dbcbed9110a3e242089226db8f
SSDEEP

12288:76twjLHj/8/GcHUIdPvjEmvTnabAh0ZnAr1U:76tQCG0UUvjEkTn4AC1+

Score

10^/10

urelas trojan

Family

urelas

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2672 4144 WerFault.exe 42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe

pid	pid_target	process	target process
2672	4144	WerFault.exe	42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\42030236e2d5d3f93eb27cf3cecbd030_NeikiAnalytics.exe"
1⤵
PID:4144

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 232
2⤵
- Program crash
PID:2672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4144 -ip 4144
1⤵
PID:4100

memory/4144-0-0x0000000000F80000-0x0000000000FFC000-memory.dmp

Filesize
496KB

Download