Overview

overview

10

Static

static

10

59b46d52fb...cs.exe

windows7-x64

10

59b46d52fb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59b46d52fbe1241c3ef7fea2830eca60_NeikiAnalytics.exe

  • Size

    415KB

  • Sample

    240617-g67nzssdkn

  • MD5

    59b46d52fbe1241c3ef7fea2830eca60

  • SHA1

    ac2375cb83e8e93964a5ba4283bff4b3c5fadce8

  • SHA256

    876b680120060000c51f5f13ad20fc5f53ff9036c2249dcd94fff0479be93de4

  • SHA512

    51101ad0a7ab1c1059ce8d3dcf3804e1f31495910b8c037c14b50c5ad82dc5a0dd56ee52ee4a4523b4b706a4c2e4f11a170c647f741eac9611ea6462c88b6cf4

  • SSDEEP

    6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODgr:oU7M5ijWh0XOW4sEfeO8r

Score
10/10
urelasaspackv2trojan

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      59b46d52fbe1241c3ef7fea2830eca60_NeikiAnalytics.exe

    • Size

      415KB

    • MD5

      59b46d52fbe1241c3ef7fea2830eca60

    • SHA1

      ac2375cb83e8e93964a5ba4283bff4b3c5fadce8

    • SHA256

      876b680120060000c51f5f13ad20fc5f53ff9036c2249dcd94fff0479be93de4

    • SHA512

      51101ad0a7ab1c1059ce8d3dcf3804e1f31495910b8c037c14b50c5ad82dc5a0dd56ee52ee4a4523b4b706a4c2e4f11a170c647f741eac9611ea6462c88b6cf4

    • SSDEEP

      6144:GzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODgr:oU7M5ijWh0XOW4sEfeO8r

    Score
    10/10
    urelasaspackv2trojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks