urelas | 46be66b18bfe78bff61806442ac63a0db8e2ddd3543212f2c115f9b6a8d7da27

Analysis

max time kernel
91s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
31-05-2024 02:16

Target

57073ab739a7fce3c7fd485366274fa0.exe
Size

307KB
MD5

57073ab739a7fce3c7fd485366274fa0
SHA1

836ed969af87088b844efbe389b62b15f624c146
SHA256

46be66b18bfe78bff61806442ac63a0db8e2ddd3543212f2c115f9b6a8d7da27
SHA512

f23e7e2fb7e332c89567995e1c84fa0c8d9563affd0377895d2e8ebb14716e398f2c602f8f80f7fda515867b28ac6c41c1b219b59b8a8506d85d02fe6b6957c2
SSDEEP

6144:yyKfEd7FQGSmAWRViVxGwl+fQSVY/Z+I2VLfFL4X3WsuF9B:yo7CGWcQSyYI2VrFfH5

Score

10^/10

urelas trojan

Family

urelas

218.54.31.226

218.54.31.165

218.54.31.166

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4092 2056 WerFault.exe 57073ab739a7fce3c7fd485366274fa0.exe

pid	pid_target	process	target process
4092	2056	WerFault.exe	57073ab739a7fce3c7fd485366274fa0.exe

C:\Users\Admin\AppData\Local\Temp\57073ab739a7fce3c7fd485366274fa0.exe
"C:\Users\Admin\AppData\Local\Temp\57073ab739a7fce3c7fd485366274fa0.exe"
1⤵
PID:2056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2056 -s 216
2⤵
- Program crash
PID:4092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2056 -ip 2056
1⤵
PID:5020

memory/2056-0-0x0000000000510000-0x0000000000591000-memory.dmp

Filesize
516KB

Download