General

  • Target

    a0ae33cf6ad5137e9eb1f55341896450_NeikiAnalytics

  • Size

    332KB

  • Sample

    240510-h9yqxsac5w

  • MD5

    a0ae33cf6ad5137e9eb1f55341896450

  • SHA1

    8719c39ac644b68d9c18137323ec3982264b6ff3

  • SHA256

    3256d814599c1d1f0ea16ba49a75fb595c80350883aac2cd3ee0f1bb422e82a7

  • SHA512

    86ab4eae58d5366c4171cf48f2a077b86bf38259818f33d913bcb7c919e6f91fc1533bdaa2038130b9dd060e001ee6de917c4812753e3996876d0bef3627a351

  • SSDEEP

    6144:GLtOexihqv4m+lXD6betiTuBMTWjIDIiUBAkW9UOKMOtzWO8CatspddOt:GL1D+IatauBML42MykRa6k

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      a0ae33cf6ad5137e9eb1f55341896450_NeikiAnalytics

    • Size

      332KB

    • MD5

      a0ae33cf6ad5137e9eb1f55341896450

    • SHA1

      8719c39ac644b68d9c18137323ec3982264b6ff3

    • SHA256

      3256d814599c1d1f0ea16ba49a75fb595c80350883aac2cd3ee0f1bb422e82a7

    • SHA512

      86ab4eae58d5366c4171cf48f2a077b86bf38259818f33d913bcb7c919e6f91fc1533bdaa2038130b9dd060e001ee6de917c4812753e3996876d0bef3627a351

    • SSDEEP

      6144:GLtOexihqv4m+lXD6betiTuBMTWjIDIiUBAkW9UOKMOtzWO8CatspddOt:GL1D+IatauBML42MykRa6k

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks