General

  • Target

    2024-08-28_ca5d84b8ec4823cc7c2f6044acb35a6b_avoslocker

  • Size

    1.6MB

  • MD5

    ca5d84b8ec4823cc7c2f6044acb35a6b

  • SHA1

    9fed8f92ff554bb5120f5cdb3cae2e044211ddac

  • SHA256

    afe0ed60feb39900327c080c5d98b31173bd2c0184372ae229de9c1ffc5c58f0

  • SHA512

    3263274d75803dd2b453a91190ccd0048da7ba7d6a8f226e976e38ab2d6ae0217dfbc8218aa905e04c5dcad305c1cae6715f2acf6c2d6a4d159aaed1b440a1ea

  • SSDEEP

    24576:RLvpteBrVtMLwQe1Qog2SoWXaJSwXjrLAmPbHMGlso/Yu:hvpm0MXdh8mPbHMGCow

Score
10/10

Malware Config

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-28_ca5d84b8ec4823cc7c2f6044acb35a6b_avoslocker
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections