General
- Target cikaz.exe
- Size 408KB
- Sample261016-wt45naaw4m
- SHA256 709d919e4cf44ecbead329ca28d96f18a00779e91d876ede31d6e2b683d29f77
- MD5 96856c58b5b605617b513b211e7637c9
- SHA1 d555e27411449c5420c1d922ab2869d3df9bdd3b
- SHA512 91ba518d0ad432e56fcbc3fffdd4852db65d3917a08096ec941f93a5ff816b06312ec439417a6c110290dd5f870acb9a222d75a8eb9b2935e951a1bd61c19010
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpVA:8IfBoDWoyFblU6hAJQnOK
- TLSH T18794BE253540C436F3290B354856EAB14AA9BC3914D9E48FF778BE7A6D311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target cikaz.exe
- Size 408KB
- SHA256 709d919e4cf44ecbead329ca28d96f18a00779e91d876ede31d6e2b683d29f77
- MD5 96856c58b5b605617b513b211e7637c9
- SHA1 d555e27411449c5420c1d922ab2869d3df9bdd3b
- SHA512 91ba518d0ad432e56fcbc3fffdd4852db65d3917a08096ec941f93a5ff816b06312ec439417a6c110290dd5f870acb9a222d75a8eb9b2935e951a1bd61c19010
- SSDEEP 6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohpVA:8IfBoDWoyFblU6hAJQnOK
- TLSH T18794BE253540C436F3290B354856EAB14AA9BC3914D9E48FF778BE7A6D311938B3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE