General

  • Target

    275ed964b4feb7d2d12053dd8eeecb7a_JaffaCakes118

  • Size

    1.4MB

  • MD5

    275ed964b4feb7d2d12053dd8eeecb7a

  • SHA1

    8c33019c08529ce2868c7ed86a04a16c5046a718

  • SHA256

    82d2e2a8529d4704d2eabfb845dc262234b73866819ef835e291c7f9818aa9b1

  • SHA512

    8cc6c9912dbb6482b2481d8924d4dd17aa7765b40655f2cf946b930335ec0f62cab939158d13f89155ea3ce15d2e0eb3d712fb0fb74081be5756e3d893347246

  • SSDEEP

    24576:dxpXPaR2J33o3S7P5zuHHOF2ahfehMHsGKzOYf8EEvX32Z1qsa:npy+VDa8rtPvX32Z8s

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.hbgents.top/

http://www.rsnzhy.com/

http://www.efxety.top/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 275ed964b4feb7d2d12053dd8eeecb7a_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    d69e4c13e25f0ad622344ac56118c0df


    Headers

    Imports

    Sections