urelas | a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674

Analysis

max time kernel
51s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 17:22

Target

a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674_NeikiAnalytics.exe
Size

264KB
MD5

3867848df8abbc47b701315bd6cbcc60
SHA1

c546beffff7b97de05ba7951ba28c8eecfdc9cfe
SHA256

a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674
SHA512

dd6086a669313ed24fd02683a3e13778bf32cb1d4f6508761767b7e633a29e7a157fd6c0d1b030525aa2a027a2d79edf494e280bad52493765393bf0f854221a
SSDEEP

3072:cjtLKCEze5N/YEbv9/yccgLT2t39kci8OcWvZWaVTx/sRaZ38wOUsbO:TzU7blKio3iCWhWapKRaRXOhbO

Score

10^/10

urelas trojan

Family

urelas

218.54.31.226

218.54.31.165

Urelas
Urelas is a trojan targeting card games.
trojan urelas
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1328 4188 WerFault.exe a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674_NeikiAnalytics.exe

pid	pid_target	process	target process
1328	4188	WerFault.exe	a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a2f8590d05c65695f20778b1abb545b689693a096819c6b823a5b025946f8674_NeikiAnalytics.exe"
1⤵
PID:4188

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4188 -s 216
2⤵
- Program crash
PID:1328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4188 -ip 4188
1⤵
PID:4732

memory/4188-0-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download