General

  • Target

    f256b9a40f5e721bfebd79931361dd96.exe

  • Size

    448KB

  • MD5

    f256b9a40f5e721bfebd79931361dd96

  • SHA1

    e93db2f7d0eab53685a827b3cd39390429b4fc22

  • SHA256

    96bb5f14432cb955566854e2637276f7aee794b2c78dd962a5cf2c0ffee5e3de

  • SHA512

    4a143dce00c27c6635f5dff176ef84d1caaef01fc1824ccdc6c7ba7e92975ec09b2b4a3729c8f85828993baba0ae117093a5e65dc7f67d2f1702c5b7edd4d4f6

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpz8:PMpASIcWYx2U6hAJQnB

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f256b9a40f5e721bfebd79931361dd96.exe
    .exe windows:5 windows x86 arch:x86

    a74af8b06f2835630017cd7cc4b0782d


    Headers

    Imports

    Sections