General

  • Target

    caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea

  • Size

    604KB

  • MD5

    8474a85f79b257450b4cc94ab3ca68bf

  • SHA1

    c906b661c4e85fc85a5df574cb12aecdd75fe95a

  • SHA256

    aab655d6654daa2d75d107a19445ce6f115a5da84b5449ea296f922046e783a0

  • SHA512

    c1f3f6290e8b48b999fb049cf062ba7ae4c7ec848c6c9deb9ae2d6a74a45f3ba1ff9a319fbb4e85d6a8ca246c034ba051b4bfa74c097dc22bb5b2eee5776ce1d

  • SSDEEP

    12288:6xEaC3LgtNB+v/XOUxQ8K3K6uGNyusaEIaFl6YBETlrJG+qYULQ:6u10tNo2XIAaPITOETlRXULQ

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea
    .zip
  • caf74292c323c1938f0b074f4cdbb3a46449427915b05023e0142ecb9ff52dea
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections