Overview

overview

10

Static

static

10

6cde50643d...18.exe

windows7-x64

10

6cde50643d...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    30-07-2024 01:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6cde50643d89d85e47103cb2d55a7985_JaffaCakes118.exe

  • Size

    440KB

  • MD5

    6cde50643d89d85e47103cb2d55a7985

  • SHA1

    1b24244387df10bd7c247f2a7c03cebb13a1924e

  • SHA256

    69faf79122e5c4c0e6aaa331acf207ed46c7ece34f0bcd891c3014e81c2bba5b

  • SHA512

    96409bb56fd0286c00349ccec63d9cb4d28d82d5f7604afe6e700d1589d8de7ed18e850bbdfc21ea619451b2792892b1b8206ae9616754ec8f0eedc00ee8019b

  • SSDEEP

    6144:CEK25f5ySIcWLsxGYW4DYM6SB6v+qLnAzYmhwrxcvkzmSOp:CMpASIcWYxsU6hAJQn

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas

    Urelas is a trojan targeting card games.

    trojanurelas

Processes

  • C:\Users\Admin\AppData\Local\Temp\6cde50643d89d85e47103cb2d55a7985_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6cde50643d89d85e47103cb2d55a7985_JaffaCakes118.exe"
    1⤵
      PID:2372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2372-0-0x0000000000400000-0x000000000046E000-memory.dmp

      Filesize

      440KB

      Download