General

  • Target

    73703a76038fe2122ee90b1f6d129480_NeikiAnalytics.exe

  • Size

    6.4MB

  • Sample

    240520-a5cnwsca4s

  • MD5

    73703a76038fe2122ee90b1f6d129480

  • SHA1

    63b06bd4186b57760ce4928ab3d949b7455ae0b9

  • SHA256

    14152d01b686c518ee44af7a29c8db8737139e932b454a3779982c0047543210

  • SHA512

    1204f9ebde8673e081ea069a9f4e56c2c53d7a3525dbd5a51e12b29b8c106383ce9a53f5c3135fa48b82906a1e0229cca55adfe8c9acd6346e858646d54a72aa

  • SSDEEP

    98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSo:i0LrA2kHKQHNk3og9unipQyOaOo

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Targets

    • Target

      73703a76038fe2122ee90b1f6d129480_NeikiAnalytics.exe

    • Size

      6.4MB

    • MD5

      73703a76038fe2122ee90b1f6d129480

    • SHA1

      63b06bd4186b57760ce4928ab3d949b7455ae0b9

    • SHA256

      14152d01b686c518ee44af7a29c8db8737139e932b454a3779982c0047543210

    • SHA512

      1204f9ebde8673e081ea069a9f4e56c2c53d7a3525dbd5a51e12b29b8c106383ce9a53f5c3135fa48b82906a1e0229cca55adfe8c9acd6346e858646d54a72aa

    • SSDEEP

      98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSo:i0LrA2kHKQHNk3og9unipQyOaOo

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks