General

  • Target

    1856-199-0x0000000000400000-0x000000000058E000-memory.dmp

  • Size

    1.6MB

  • MD5

    10501fca88fb4863e0a07ddb07769388

  • SHA1

    5c32c08c065713263e3f0b0f72bf8814b8960ca7

  • SHA256

    608ab6c86e078d7cbcd418b8fd22116c33d03af399b6985dba3a5c7cad6836fd

  • SHA512

    21d63d48912d1a93febeadf8be697cdd446a4fc49dd1542023d2ffcd28d5104475dc829d1b782e8ce1140d4e126cd08db7cc8ae9d0897b784cc90633fdc3da92

  • SSDEEP

    24576:I88pq1ZW6rIczqGTQP2MZt7qjgtD8QH1TuPDLgJNDKYA9:INpylfJdaLFuPPgTDa9

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://dfgrthres.s3.eu-west-3.amazonaws.com/asdhs909/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 1856-199-0x0000000000400000-0x000000000058E000-memory.dmp
    .exe windows x86


    Headers

    Sections