General

  • Target

    533fa0fc69c4a516d19c15cfb3490732_JaffaCakes118

  • Size

    1.4MB

  • MD5

    533fa0fc69c4a516d19c15cfb3490732

  • SHA1

    795de8ad6c4363c6e21a5df0dc619e6173cd73b1

  • SHA256

    69a72e21fee186b463e8482284f561e68939e0376d1670838b28f092388322d4

  • SHA512

    9af2503285cca92524c9c00ec9e5547dcbd78087cf37e4af48e0e7f328aa3f619637c21b780fcd73a5055ae1a535cdbca04165686780b573c75badad22e7383c

  • SSDEEP

    24576:yIA7opO13nWEjukQuzHVZ64lEq25RHxrFCKezViURT1jS7VQ+IB41Cf6:27op+Weu+zHj64ENRhCHJh1jS7y+IBOT

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.wygexde.xyz/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 533fa0fc69c4a516d19c15cfb3490732_JaffaCakes118
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections