Overview

overview

10

Static

static

10

147ddac047...cs.exe

windows7-x64

10

147ddac047...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    147ddac047e768fcd95ee46620c9bb50_NeikiAnalytics.exe

  • Size

    359KB

  • Sample

    240618-akkh1azdlh

  • MD5

    147ddac047e768fcd95ee46620c9bb50

  • SHA1

    fea3efad7bbfbeb51c311abd1269d208e5c99cc4

  • SHA256

    092feaa449f6b06fcad8006164091ae694446ee6631dfea678a2d8f8330fa5be

  • SHA512

    8b7f00cd7f61bfe3bb17220a8bb2e26bb43a39195ece3cff9a8cf3d654cdf1c44fe3e9d8e6442e8b3b29799730f3b0d46f4a38b2c6a89bbe3ab19c3261b72bdb

  • SSDEEP

    6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0ho:MUyI6QmPPPqVspr

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

218.54.31.226

218.54.31.165

Targets

    • Target

      147ddac047e768fcd95ee46620c9bb50_NeikiAnalytics.exe

    • Size

      359KB

    • MD5

      147ddac047e768fcd95ee46620c9bb50

    • SHA1

      fea3efad7bbfbeb51c311abd1269d208e5c99cc4

    • SHA256

      092feaa449f6b06fcad8006164091ae694446ee6631dfea678a2d8f8330fa5be

    • SHA512

      8b7f00cd7f61bfe3bb17220a8bb2e26bb43a39195ece3cff9a8cf3d654cdf1c44fe3e9d8e6442e8b3b29799730f3b0d46f4a38b2c6a89bbe3ab19c3261b72bdb

    • SSDEEP

      6144:c1bYec5C8AAYLxhEmPG7qwmioqVsCqbN0ho:MUyI6QmPPPqVspr

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks