urelas | 2937aaafba0104540410c6e320a91e941d86f9f2f2288a630a1c90b94f7a56fa

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2024 00:50

Target

7efb5106aa71eb08ead0f836bc1a55eb_JaffaCakes118.exe
Size

440KB
MD5

7efb5106aa71eb08ead0f836bc1a55eb
SHA1

13641cf67a9f4c95025c8acb4a6d1574b717bc5f
SHA256

2937aaafba0104540410c6e320a91e941d86f9f2f2288a630a1c90b94f7a56fa
SHA512

cc7cb81d4ce66ed8395148408e7beb4872044783003d04b9de18a85889ccc280598a4833aabb21e2c5cdd2ffa7ff113978253275c60a4d2cbdc2943027c67b9b
SSDEEP

6144:CEK25f5ySIcWLsxGgW4DYM6SB6v+qLnAzYmhwrxcvkzmSOp:CMpASIcWYx0U6hAJQn

Score

10^/10

urelas trojan

Family

urelas

218.54.31.165

218.54.31.226

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2888 4872 WerFault.exe 7efb5106aa71eb08ead0f836bc1a55eb_JaffaCakes118.exe

pid	pid_target	process	target process
2888	4872	WerFault.exe	7efb5106aa71eb08ead0f836bc1a55eb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\7efb5106aa71eb08ead0f836bc1a55eb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7efb5106aa71eb08ead0f836bc1a55eb_JaffaCakes118.exe"
1⤵
PID:4872

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 216
2⤵
- Program crash
PID:2888

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4872 -ip 4872
1⤵
PID:3044

memory/4872-0-0x0000000000400000-0x000000000046E000-memory.dmp

Filesize
440KB

Download