General

  • Target

    f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

  • Size

    1.6MB

  • MD5

    52576b28157b0aae373e927fc9c56a68

  • SHA1

    e0173b265bf9944223e90689448d1855506fa57b

  • SHA256

    f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

  • SHA512

    51548af52fd852d80bec27fdae855c181827d5139952bfa2c15b0337d4534932ae364620e0dd352a77445d1bd8ddf7ec04c9c126231944a8f295b61c69a8b0f5

  • SSDEEP

    24576:sJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgD1GqBbn:sup62ESMTjTPjgD4qBn

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1
    .exe windows:6 windows x86 arch:x86

    3377d059ff301125092e830db1cc70db


    Headers

    Imports

    Sections