General

  • Target

    6d4b25ec326231d0f838e207ee6ec6e2f4f551292576209ccd0d8e42888bfe28

  • Size

    267KB

  • MD5

    0549be7965e951a14f8cd456d71552eb

  • SHA1

    55b38fae21b185554f5e115b5c0ce78be55d39ad

  • SHA256

    6d4b25ec326231d0f838e207ee6ec6e2f4f551292576209ccd0d8e42888bfe28

  • SHA512

    aaf5a9fdf9031b1d6e50a488a4de9833436a92c123ee6ca670dd06639122bd3e8b1e3e02efae83bb2f7674d735302cb7658bdc4e938658dc98c2e3fb77cf135e

  • SSDEEP

    6144:7IgNm13fXfFX8iUFFz7a2sALr4H+6W1JPV6zddSM00WDA:7IW0llU+lWK+6Wzt6hdq0WDA

Score
10/10

Malware Config

Extracted

Family

urelas

C2

218.54.31.165

218.54.31.226

Signatures

  • Urelas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d4b25ec326231d0f838e207ee6ec6e2f4f551292576209ccd0d8e42888bfe28
    .zip

    Password: infected

  • 9806575fa0dec2cc110cd3c51d1ecc25cfb6a7d36739124204223bcd7ef6eeb5
    .exe windows:5 windows x86 arch:x86

    a74af8b06f2835630017cd7cc4b0782d


    Headers

    Imports

    Sections