General

  • Target

    caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea

  • Size

    675KB

  • MD5

    c0d181d86bc83c6fb9d4d63d1b468043

  • SHA1

    a3259aff0cf014a506d0eacf02cca9954523b1b0

  • SHA256

    caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea

  • SHA512

    5e75e9fcf86f2e3710132fe82afa582a247d1e4810177a2a23c628fd50e5922db37df93a57f1807f11f4d8d48b124600ff7cc04dffa97bb5d24a8398957a1f87

  • SSDEEP

    12288:eqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjPWCBzZ68:e5kxyZFe+hcGEXGwiY2jy6Z

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections