Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a8e80107d8d1e64b2e2a1aa7683f3e70_NeikiAnalytics

  • Size

    80KB

  • Sample

    240510-jwvb1sfb66

  • MD5

    a8e80107d8d1e64b2e2a1aa7683f3e70

  • SHA1

    cf73995377c48a5e8a22a70d1ec04fa0e25e9891

  • SHA256

    8a4909edd9fc35b36e7ae79908cb83dbd4d81629691f2a00667a81f03c8d54a4

  • SHA512

    dc5069c8da735c2675fc83a725663ad8f7e9865e7703c6277de39a19888addecd0da02fc6670752d593ccc3cc2fa4b6e395abc6595bc0540b050a2ce8bf037d7

  • SSDEEP

    1536:jIr3YriYiUi+H++o1eVlXd+8c0GXmvJJNHjLwl50fP5jy:jyYti0pXd+8c0GWvJ3Hvwl52W

Score
10/10

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      a8e80107d8d1e64b2e2a1aa7683f3e70_NeikiAnalytics

    • Size

      80KB

    • MD5

      a8e80107d8d1e64b2e2a1aa7683f3e70

    • SHA1

      cf73995377c48a5e8a22a70d1ec04fa0e25e9891

    • SHA256

      8a4909edd9fc35b36e7ae79908cb83dbd4d81629691f2a00667a81f03c8d54a4

    • SHA512

      dc5069c8da735c2675fc83a725663ad8f7e9865e7703c6277de39a19888addecd0da02fc6670752d593ccc3cc2fa4b6e395abc6595bc0540b050a2ce8bf037d7

    • SSDEEP

      1536:jIr3YriYiUi+H++o1eVlXd+8c0GXmvJJNHjLwl50fP5jy:jyYti0pXd+8c0GWvJ3Hvwl52W

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks