General

  • Target

    Backdoor.Win32.Plite.bhty-53e2d9cf51d1002148232ed3baecbcc7d38042b813a80ff1dd49dbd4af6120fe

  • Size

    425KB

  • MD5

    3975eae09b24b158869457531064c675

  • SHA1

    6168f616af1a7312ce9bb8dd0e9154f1d81e4c6f

  • SHA256

    53e2d9cf51d1002148232ed3baecbcc7d38042b813a80ff1dd49dbd4af6120fe

  • SHA512

    0671d05e2ccdd03dbd757bc10538495bf882aa26489c56230e7350a3991e3bb0007a37fa91e899dfdbe5b704d3e2ef09a71c826f9410f7520e70c0e799832a8d

  • SSDEEP

    6144:y5SXvBoDWoyLYyzbpPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrBw/gqrMw:yIfBoDWoyFboU6hAJQnrMgqow

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Backdoor.Win32.Plite.bhty-53e2d9cf51d1002148232ed3baecbcc7d38042b813a80ff1dd49dbd4af6120fe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections