General

  • Target

    file.exe

  • Size

    675KB

  • MD5

    ac1ce0315f3dac134468f8a88eca9f23

  • SHA1

    92368c87d8e680a0feccdcb787560c67e1318559

  • SHA256

    b832e2e45da905ec1e59c1884b34fb28fe270a834c96d16a971519b839453b4e

  • SHA512

    dd59b967e2ff4346f3f13fdbb3e0bde36027ef2a873de68d4b42e6a1cd69bb3a0a0954999dbcacc961df2b94748659ba2aa023bafe4beb2647fbde4ee49f2ff7

  • SSDEEP

    12288:dqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjAep1W2Ual4:d5kxyZFe+hcGEXGwiY2j/pwZ

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • file.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections