General

  • Target

    HEUR-Backdoor.Win32.Plite.gen-0c9b896297666fa6bb9a2f1bff5f43d69d9d08de0a9c31804c22eab5a170a486

  • Size

    455KB

  • MD5

    65305bd01e623f8d7defa09df34bccc5

  • SHA1

    680dd068560722065e465a81c5b88b313b8dce3c

  • SHA256

    0c9b896297666fa6bb9a2f1bff5f43d69d9d08de0a9c31804c22eab5a170a486

  • SHA512

    73c8205a84fceae01c8db60031dc378cd8ca92d6d8d5b14b3147ea88cfb46e525fd2b4a58bddfb56a58f1a8d1cf5fd4980e329006517b9422fad86095013c693

  • SSDEEP

    6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoE+:PMpASIcWYx2U6hAJQnt

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Backdoor.Win32.Plite.gen-0c9b896297666fa6bb9a2f1bff5f43d69d9d08de0a9c31804c22eab5a170a486
    .exe windows:5 windows x86 arch:x86

    a74af8b06f2835630017cd7cc4b0782d


    Headers

    Imports

    Sections