General

  • Target

    588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

  • Size

    1.6MB

  • MD5

    8db7ecc5e5ccf384918220442e9efb96

  • SHA1

    f85ee703eec27e61c5dc6b88041abd41fab75c32

  • SHA256

    588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

  • SHA512

    6907e9ec0f565367978737ed1d5b55c209d211567a0bb6de66bf3a5af7914c57a9a694edf5e55821ba2ee20359e2b032d5f0c64e9edcfacabc7154f034216e79

  • SSDEEP

    24576:pJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgDReqBzn:pup62ESMTjTPjgDsqVn

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246
    .exe windows:6 windows x86 arch:x86

    3377d059ff301125092e830db1cc70db


    Headers

    Imports

    Sections