General

  • Target

    3720-245-0x0000000000400000-0x000000000058E000-memory.dmp

  • Size

    1.6MB

  • MD5

    6b697310ae49d30a31191c6cf56af844

  • SHA1

    d6f3aab41daa4435483d651ae527f941f6bcc686

  • SHA256

    16723977fe5ff2a15fcb166d1a0958d1beb192a2982647d13ae44c705409f8fe

  • SHA512

    ea39d7f4c78abbf5bc50ef7021306e33b5f5a1eeede6aeb3e80aeb7c2344b1282fe029f8c7df9d9a07891ee684be167c156055da37e197844bb392d7aef78ec0

  • SSDEEP

    24576:T2m8pq1ZW6rIczqGTQP2MZt7qjgtD8XH1TuPDLERaDKYJ:TQpylfJda0FuPPEgDH

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hueduy.s3.eu-west-1.amazonaws.com/dhfry901/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 3720-245-0x0000000000400000-0x000000000058E000-memory.dmp
    .exe windows x86


    Headers

    Sections