Overview

overview

10

Static

static

10

9ebc57cdca...cs.exe

windows7-x64

10

9ebc57cdca...cs.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-06-2024 06:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9ebc57cdcaff99f3e6d7988bebe86b90_NeikiAnalytics.exe

  • Size

    440KB

  • MD5

    9ebc57cdcaff99f3e6d7988bebe86b90

  • SHA1

    f7aa8c1384d62787f4179473bad94b06b44c6652

  • SHA256

    e7aadb73777450e9e2b7e3a8ac543ee4c63116f9964aeaf84933a7ededab93f0

  • SHA512

    f22ac95697f24361cb5d7d7a2fecf9635a8af883e664d88c8319f93bcee9dca90ec1dad0d1980efa6afe7ab10e5df1ba7ca5c0c12e72958fa41407f87301c6fd

  • SSDEEP

    12288:k+r5WnFdX8BRxOQAOPEmvTnabAh0ZnAr1U:kgmsRsQzPEkTn4AC1+

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.30.235

Signatures

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9ebc57cdcaff99f3e6d7988bebe86b90_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\9ebc57cdcaff99f3e6d7988bebe86b90_NeikiAnalytics.exe"
    1⤵
      PID:1100
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1100 -s 216
        2⤵
        • Program crash
        PID:4748
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1100 -ip 1100
      1⤵
        PID:2124

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1100-0-0x0000000000D00000-0x0000000000D7C000-memory.dmp

        Filesize

        496KB

        Download