General

  • Target

    1fa586e62dea7709a042a32e18265fa16b8e2e930bb6b7df7bf3bcda9bc7adb5

  • Size

    428KB

  • MD5

    4d8a8e3df184917a0ae3043fe7b4072d

  • SHA1

    3620d7a18ee92904ef41a5e937f47d92c2056eed

  • SHA256

    1fa586e62dea7709a042a32e18265fa16b8e2e930bb6b7df7bf3bcda9bc7adb5

  • SHA512

    0894ba8bd27530a4ca58dc41cb0884f9bb6d468df85ea5ae745ac81d265905564caf5107f0e21e96569d0a24aea2710d774d0b4da6a37bf897c36b793fa28475

  • SSDEEP

    6144:hGOMmhsKI2ir5crKFHLZx2LpLDXeZOXOS/6zb2:hGOIB5crKFHLZx2LpPeZOX

Score
10/10

Malware Config

Extracted

Family

urelas

C2

F121.88.5.184

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • Urelas family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fa586e62dea7709a042a32e18265fa16b8e2e930bb6b7df7bf3bcda9bc7adb5
    .exe windows:5 windows x86 arch:x86

    095b507da04cd5c5d1c0870fc9e0c3d3


    Headers

    Imports

    Sections