Overview

overview

10

Static

static

3

0473b524e2...cs.exe

windows7-x64

10

0473b524e2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f_NeikiAnalytics.exe

  • Size

    141KB

  • Sample

    240701-yzsd6axcja

  • MD5

    78b6a3a0e336856187f64585cf3ea0f0

  • SHA1

    93b2adc86a79888b1089f79dae18183466d4b744

  • SHA256

    0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f

  • SHA512

    05b5fdc5c56578d574f19ec66d054b80ef95f8a79090756a0fb524b5703127a191af17da65471e890027fc39eacf4c68bbf1efe31b50ea9f55c7773577852df7

  • SSDEEP

    3072:7D8wMT6/JO6SaqLRuNw8niD0LdkD85eL/K:vMT6o6xO8ioGw5eL/K

Score
10/10
urelastrojan

Malware Config

Extracted

Family

urelas

C2

112.175.88.207

112.175.88.208

Targets

    • Target

      0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f_NeikiAnalytics.exe

    • Size

      141KB

    • MD5

      78b6a3a0e336856187f64585cf3ea0f0

    • SHA1

      93b2adc86a79888b1089f79dae18183466d4b744

    • SHA256

      0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f

    • SHA512

      05b5fdc5c56578d574f19ec66d054b80ef95f8a79090756a0fb524b5703127a191af17da65471e890027fc39eacf4c68bbf1efe31b50ea9f55c7773577852df7

    • SSDEEP

      3072:7D8wMT6/JO6SaqLRuNw8niD0LdkD85eL/K:vMT6o6xO8ioGw5eL/K

    Score
    10/10
    urelastrojan

    • Urelas

      Urelas is a trojan targeting card games.

      trojanurelas

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks