General

  • Target

    440a03adbcb535d0f7bb055cebcce1c68948757a122e94414dd47369b56be3b2_NeikiAnalytics.exe

  • Size

    69KB

  • Sample

    240620-h5er9awamf

  • MD5

    3569029d532b485bdbb704b48ca4f7e0

  • SHA1

    ab3344346205dcb2bbbeb7b1c36bcb60e4d3a67e

  • SHA256

    440a03adbcb535d0f7bb055cebcce1c68948757a122e94414dd47369b56be3b2

  • SHA512

    1c389e911030b7ed587461efd0bbfd10220b72ffff59a4e723539df2360baec90c702b538f4f4c11d9e07d1d289394f407b44e99b1ea863dcfa2435474efff08

  • SSDEEP

    1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawe:yLAYUzmdD0sMQl7d7IuhCaeT

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.47.76

218.54.47.77

218.54.47.74

Targets

    • Target

      440a03adbcb535d0f7bb055cebcce1c68948757a122e94414dd47369b56be3b2_NeikiAnalytics.exe

    • Size

      69KB

    • MD5

      3569029d532b485bdbb704b48ca4f7e0

    • SHA1

      ab3344346205dcb2bbbeb7b1c36bcb60e4d3a67e

    • SHA256

      440a03adbcb535d0f7bb055cebcce1c68948757a122e94414dd47369b56be3b2

    • SHA512

      1c389e911030b7ed587461efd0bbfd10220b72ffff59a4e723539df2360baec90c702b538f4f4c11d9e07d1d289394f407b44e99b1ea863dcfa2435474efff08

    • SSDEEP

      1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawe:yLAYUzmdD0sMQl7d7IuhCaeT

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks