General

  • Target

    157646ff04ada66f27f7a4a4fbce1870_NeikiAnalytics.exe

  • Size

    514KB

  • Sample

    240525-ymhdesgb9x

  • MD5

    157646ff04ada66f27f7a4a4fbce1870

  • SHA1

    2ce85bf0918ea8bab413ac9a9abc28457154ace6

  • SHA256

    b43f103544d577c13c6854a1b4a2ce3695ffd19944d7e0d72f82c13b651eccb6

  • SHA512

    764e020ad8546fd0527a5df0a45963f63edd56d73ad397c4771c998594ccf4acc3d9b41496a0ade70c742f68fcb41e49568f1e210c204e146fb57653bfc5286e

  • SSDEEP

    6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPP:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpz

Score
10/10

Malware Config

Extracted

Family

urelas

C2

1.234.83.146

133.242.129.155

218.54.31.226

218.54.31.165

Targets

    • Target

      157646ff04ada66f27f7a4a4fbce1870_NeikiAnalytics.exe

    • Size

      514KB

    • MD5

      157646ff04ada66f27f7a4a4fbce1870

    • SHA1

      2ce85bf0918ea8bab413ac9a9abc28457154ace6

    • SHA256

      b43f103544d577c13c6854a1b4a2ce3695ffd19944d7e0d72f82c13b651eccb6

    • SHA512

      764e020ad8546fd0527a5df0a45963f63edd56d73ad397c4771c998594ccf4acc3d9b41496a0ade70c742f68fcb41e49568f1e210c204e146fb57653bfc5286e

    • SSDEEP

      6144:/S4Oq+xNofxkNYFQQG8SdrL9Ti5v4gFcFhN87tW6cvC0WMQbv6FumphcKTtT1ZPP:fwYFQQG8SdrNa4gFK0IqXOFumphcKTpz

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks