General

  • Target

    48c29d09dd192feef5d3a4ef336f68f2.exe

  • Size

    675KB

  • MD5

    48c29d09dd192feef5d3a4ef336f68f2

  • SHA1

    c2460c03b479fca85b224fbbe5a5cb8ee3df78b2

  • SHA256

    a36235cf6227068e9eab19405dc5b06606fe2a4d81bc0f41356e12b39b285cad

  • SHA512

    053921a398b0503b918cafc154d52c244b3c9511b24651391146060fb802246273933b4809bba74ce4856fcf00f42c95e0be0c6e5d5ea183f4813b269ffaec1f

  • SSDEEP

    12288:rqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjUzLeMWFMYW:r5kxyZFe+hcGEXGwiY2juWCYW

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadew1013/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 48c29d09dd192feef5d3a4ef336f68f2.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections