urelas | d83d1c4b12396d5aef9bd3c10ef8a5fc48644c5892d4defb29ac7e0529438bd7

Analysis

max time kernel
133s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03-06-2024 07:01

Target

9f86faa46da0898e010b12cd9a91a7b0_NeikiAnalytics.exe
Size

383KB
MD5

9f86faa46da0898e010b12cd9a91a7b0
SHA1

c4f11a4d34e04b83252b9ba295751fb85ba10d53
SHA256

d83d1c4b12396d5aef9bd3c10ef8a5fc48644c5892d4defb29ac7e0529438bd7
SHA512

cb86305a1857907629aac3574c980cef4fba03a68c5bc0d3faf58681cb65a1b71be7cbf21cca94cbbaed1b78477e61f751801fa747d5f6a1852f5f1f5d05eaec
SSDEEP

6144:vwb/gbXb6QIrB8Ba+uP8/JZ0nmZtCFkYLR3u4uQ7x39NnPURL:vwb/gzmS0+u2H8qLcJn

Score

10^/10

urelas trojan

Family

urelas

218.54.31.226

218.54.31.165

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4784 4800 WerFault.exe 9f86faa46da0898e010b12cd9a91a7b0_NeikiAnalytics.exe

pid	pid_target	process	target process
4784	4800	WerFault.exe	9f86faa46da0898e010b12cd9a91a7b0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\9f86faa46da0898e010b12cd9a91a7b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9f86faa46da0898e010b12cd9a91a7b0_NeikiAnalytics.exe"
1⤵
PID:4800

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 212
2⤵
- Program crash
PID:4784

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4800 -ip 4800
1⤵
PID:2088

memory/4800-0-0x0000000000400000-0x0000000000466000-memory.dmp

Filesize
408KB

Download