General

  • Target

    6dbfd0bcfac3795c45eaa45eba1e1d3b5d54e3ebd9e8832250a5f7a367754877

  • Size

    428KB

  • MD5

    bb8663547fbc759185db8ba625553cc6

  • SHA1

    2de3fa6319b6ee87da1abff5be86b6e9bc342efd

  • SHA256

    6dbfd0bcfac3795c45eaa45eba1e1d3b5d54e3ebd9e8832250a5f7a367754877

  • SHA512

    d9966e09bbb7e95ac35c5c3ae11a96bf0d41d3ba82f6eff7919a73ee98798842547e5f55ee14dcfb95fd7cc29e2bcccfcc10e2d490c559935d88fb27f8148dcd

  • SSDEEP

    6144:hGOMmhsKI2ir5crKFHLZx2LpLDXeZOXOS/6zbx:hGOIB5crKFHLZx2LpPeZOG

Score
10/10

Malware Config

Extracted

Family

urelas

C2

F121.88.5.184

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6dbfd0bcfac3795c45eaa45eba1e1d3b5d54e3ebd9e8832250a5f7a367754877
    .exe windows:5 windows x86 arch:x86

    095b507da04cd5c5d1c0870fc9e0c3d3


    Headers

    Imports

    Sections