General

  • Target

    4ba365cc21abe340511ca35120ed9f5d62efea0b01c637b5b536f8f28aa660f1

  • Size

    675KB

  • MD5

    a8b99e5b8bf159bbb29a6011c4cc3875

  • SHA1

    f320cd481aff0297c2c47883f56eca5fc2eb84a1

  • SHA256

    4ba365cc21abe340511ca35120ed9f5d62efea0b01c637b5b536f8f28aa660f1

  • SHA512

    60ab118c1f1360da361c1cfc504464d768790310a06d4f25be0966c38ac316bf47dcf0ee0f7efc89d669a7ed893fc9587d0091ff487c758aceade498d87bd077

  • SSDEEP

    12288:dqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjzE8GfcCWGqeL:d5kxyZFe+hcGEXGwiY2jPru0eL

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 4ba365cc21abe340511ca35120ed9f5d62efea0b01c637b5b536f8f28aa660f1
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections