General

  • Target

    HEUR-Backdoor.Win32.Plite.gen-584c684928548c01a021ff819c1d7ef32d0cae5294a0e9dae28cecae74006cc4

  • Size

    464KB

  • MD5

    b0f1265a2bd58a1ba0ae56ab6b43f968

  • SHA1

    eba95ac55797bc8ee8f78a0255b8375b3ed8f82e

  • SHA256

    584c684928548c01a021ff819c1d7ef32d0cae5294a0e9dae28cecae74006cc4

  • SHA512

    7a0af864416fcdff0ffd5493c3d1ed55225dadefa9ede4b599af5e0122fafde8d3d81e4e73f2d9dcd3a8643b4ee1a8e93cf7ebbc32f35fe414eeff84ca55f811

  • SSDEEP

    6144:LEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFRdm9:LMpASIcWYx2U6hAJQnr

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Backdoor.Win32.Plite.gen-584c684928548c01a021ff819c1d7ef32d0cae5294a0e9dae28cecae74006cc4
    .exe windows:5 windows x86 arch:x86

    a74af8b06f2835630017cd7cc4b0782d


    Headers

    Imports

    Sections