urelas | df207e2d6fa8c83656632f0652b1ac3e[.]zip

General

Target
df207e2d6fa8c83656632f0652b1ac3e.zip
Size 55KB
Sample240901-16282stgna
SHA256 42cc5f742e9778fe76ac83ee925051bcb779e3e3c730c64168068e5336f83af9
MD5 5bf6119e97569b63be3809e23938e6ab
SHA1 957bdd17a2ddde09119fe1ae70100a13f04003a3
SHA512 510572482fdbfd31c46f658f232ea68096fba0af36dce0e2df587f34bcd712bef5249409111e17e0eddc673c94dd9a2cade039c6358e7f3840bd3e5c502e0fed
SSDEEP 1536:/0RnnpviJDPbipHaO1/8pgVbXK0d3A83L:/0dpmbipHaYkpmQUL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

urelas

Malware Config

Signatures

Urelas family
urelas

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/10b5ff9b81639324658dde456ad3ae8b495472b09e3a249a09caa2432152618f

File Explorer

df207e2d6fa8c83656632f0652b1ac3e.zip

.zip 55KB
10b5ff9b81639324658dde456ad3ae8b495472b09e3a249a09caa2432152618f

.exe 109KB

df207e2d6fa8c83656632f0652b1ac3e.zip

SHA256 42cc5f742e9778fe76ac83ee925051bcb779e3e3c730c64168068e5336f83af9
MD5 5bf6119e97569b63be3809e23938e6ab
SHA1 957bdd17a2ddde09119fe1ae70100a13f04003a3
SHA512 510572482fdbfd31c46f658f232ea68096fba0af36dce0e2df587f34bcd712bef5249409111e17e0eddc673c94dd9a2cade039c6358e7f3840bd3e5c502e0fed
SSDEEP 1536:/0RnnpviJDPbipHaO1/8pgVbXK0d3A83L:/0dpmbipHaYkpmQUL
MD5 SHA1 SHA512 SSDEEP

Password

infected

10b5ff9b81639324658dde456ad3ae8b495472b09e3a249a09caa2432152618f

SHA256 10b5ff9b81639324658dde456ad3ae8b495472b09e3a249a09caa2432152618f
MD5 df207e2d6fa8c83656632f0652b1ac3e
SHA1 e1660726ff8505f7d00f113a860970712e7c9198
SHA512 fdd75ec2780ced447cde12df18028bf6f15ddc667a11536435c9577501164f4b4ffd07ffcc726fc93bb0ca1d0a6175d13443e2c22ebf7e595780169e3e9ae59a
SSDEEP 1536:3JoHHwAnTtIBcNCk+syhonfC3GNKcK7+sWjcd8sWL64TGFjI93e:4tCc+/h0fmSid81L64TGVI93e
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

1

Major OS version

5

Entry point

22159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

65KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

23KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

OPSDGWFD

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

df207e2d6fa8c83656632f0652b1ac3e.zip

10b5ff9b81639324658dde456ad3ae8b495472b09e3a249a09caa2432152618f

generic