Overview

overview

10

Static

static

10

SecuriteIn...28.exe

windows7-x64

10

SecuriteIn...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.Siggen17.50710.29988.30128.exe

  • Size

    675KB

  • MD5

    54eae36ba43ec3cdd00e661ee27dae65

  • SHA1

    cf0c253a3f55250863e26cbc8f3b6cc4efaf090d

  • SHA256

    6d8912995a9e623e3ad81df48082760173e4fe7f0f31ee9c6662ad6608b2d166

  • SHA512

    96a7081d5ad16f5d9c8171b46110db6f00e8902a0697f80d8438492694883c182954f4a191bd0ea252fa42bea2202743053d2d9ee801ec706ff0b881e5e56600

  • SSDEEP

    12288:CtyrRUMSRigC+9Cp0kDQUIXf8hrtOqjE6LNvEjWHnQl2+m22nS:CklULlkBIXf8VtrLvE9jAS

Score
10/10
upxsocelars

Malware Config

Extracted

Family

socelars

C2

https://dfgrthres.s3.eu-west-3.amazonaws.com/asdhs909/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • SecuriteInfo.com.Trojan.Siggen17.50710.29988.30128.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections