General

  • Target

    3c57ee3634fc90a7d613f0c421acf78356401c745c7f3a96ba4535dce424d13f_NeikiAnalytics

  • Size

    93KB

  • Sample

    240521-m6n5jabc31

  • MD5

    5acfef5e44478125bfede61bf2fae160

  • SHA1

    d4b5560b534fc52a51ed72ea15aeed17d22f87ef

  • SHA256

    3c57ee3634fc90a7d613f0c421acf78356401c745c7f3a96ba4535dce424d13f

  • SHA512

    4549b4282c564a1754bbc09fd772788efc6361d51c93f8fb894aedd2489d1f98ba090421c5a43d69a5e383fac40fc92bfa06039c6768f0359cdc3f353854af36

  • SSDEEP

    1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRv0:SSf9yk+U2V63XAFSrRv0

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.77

218.54.47.74

Targets

    • Target

      3c57ee3634fc90a7d613f0c421acf78356401c745c7f3a96ba4535dce424d13f_NeikiAnalytics

    • Size

      93KB

    • MD5

      5acfef5e44478125bfede61bf2fae160

    • SHA1

      d4b5560b534fc52a51ed72ea15aeed17d22f87ef

    • SHA256

      3c57ee3634fc90a7d613f0c421acf78356401c745c7f3a96ba4535dce424d13f

    • SHA512

      4549b4282c564a1754bbc09fd772788efc6361d51c93f8fb894aedd2489d1f98ba090421c5a43d69a5e383fac40fc92bfa06039c6768f0359cdc3f353854af36

    • SSDEEP

      1536:OVNSf7hyk+I6412V6PMqAax80XAFSrRv0:SSf9yk+U2V63XAFSrRv0

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks