General

  • Target

    12864f184714ac862b66025280858b3b.exe

  • Size

    675KB

  • MD5

    12864f184714ac862b66025280858b3b

  • SHA1

    70ed23c6d68cf4d035ecf3419ceb2a9ee405b055

  • SHA256

    36e003af8bc37c5eb22b9cb4999de037f295217f9378e1e53f5f0740d611c565

  • SHA512

    afbba443e00f79669e66e843649c0641c02040942044a3117e85dc9a1ee3cc0eef01ff259961eeafa591ab7eed84d360877525bdf1041a4e3ac9f8d85c8feacd

  • SSDEEP

    12288:/E1M9Vh3xscEe7b1QfOy6zNM1lPHmVVbvwhlXf5aM1QBU8Btd:EM9DQQyD1lPH0V7ulXxFQB

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadew1013/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 12864f184714ac862b66025280858b3b.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections