General

  • Target

    6b48ed8f3626b6f56343450b50becea0_NeikiAnalytics

  • Size

    54KB

  • Sample

    240510-ey4agsea35

  • MD5

    6b48ed8f3626b6f56343450b50becea0

  • SHA1

    6645c793c7b654cdac62b2b6037cf109d2b792a6

  • SHA256

    943cb65a7f7fa8fb3016f65056a7610eaaaf3d8eec7d3916e6a7b887bd0292c8

  • SHA512

    15ae89c84b9a13193ede3dbc498d56899456c608b01c43139047aef17727e6bb1ad992a01142f0e674cb832e294e87ac33ebe00d56a09d6d7be821aad0ba7499

  • SSDEEP

    1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHV:vMhAe5Zs091KI+JYixw49Xjrg

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      6b48ed8f3626b6f56343450b50becea0_NeikiAnalytics

    • Size

      54KB

    • MD5

      6b48ed8f3626b6f56343450b50becea0

    • SHA1

      6645c793c7b654cdac62b2b6037cf109d2b792a6

    • SHA256

      943cb65a7f7fa8fb3016f65056a7610eaaaf3d8eec7d3916e6a7b887bd0292c8

    • SHA512

      15ae89c84b9a13193ede3dbc498d56899456c608b01c43139047aef17727e6bb1ad992a01142f0e674cb832e294e87ac33ebe00d56a09d6d7be821aad0ba7499

    • SSDEEP

      1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHV:vMhAe5Zs091KI+JYixw49Xjrg

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks