General

  • Target

    0fee253abb38bd8c1ae130c4ce7def19f32c03571f97fb8da2e5e9017afb2251

  • Size

    427KB

  • MD5

    8b9b6e06f08f3d02918ee0da9d5e1819

  • SHA1

    4c0b6bde2583b43c044f6b5a80de1872f457c4c0

  • SHA256

    0fee253abb38bd8c1ae130c4ce7def19f32c03571f97fb8da2e5e9017afb2251

  • SHA512

    c6b43d2e880b25e42507b9d2f7f0de87f2a6e37d7b422626dc2f1733ed00f1bcda5c6d0d0b24c4a22ef0f307af5b997ef802c54478193fd42f47836d17b138a5

  • SSDEEP

    6144:hGOMmhsKI2ir5crKFHLZx2LpLDXeZOXOS/6zbq:hGOIB5crKFHLZx2LpPeZO/

Score
10/10

Malware Config

Extracted

Family

urelas

C2

F121.88.5.184

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fee253abb38bd8c1ae130c4ce7def19f32c03571f97fb8da2e5e9017afb2251
    .exe windows:5 windows x86 arch:x86

    095b507da04cd5c5d1c0870fc9e0c3d3


    Headers

    Imports

    Sections