Overview

overview

10

Static

static

10

55c9528673...82.exe

windows7-x64

10

55c9528673...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_27703d5957f0113ade3d59b90e5f8ea36806071ee9812a26d1aba7cf08161916

  • Size

    712KB

  • MD5

    b3701c0dbe426ba99192a7cdfd7b0a26

  • SHA1

    cdc0154423a3bf2af1240d2dee35d9d631c23a4e

  • SHA256

    27703d5957f0113ade3d59b90e5f8ea36806071ee9812a26d1aba7cf08161916

  • SHA512

    25a615af8dc2e171ab050b4dafc8ce0b0b673d71bff106158d2fad6c04f9cf4f896b3aceaf2cba5172e4e849634917f4669695cb26f0d9827419f0c0fb2e9c82

  • SSDEEP

    12288:X8WUfruTzG7CBdRLEX07AHX1SvozPi+SCYlTLWY5tGyFrdp6zRcf/HchsqS41AN:sB4xvOEcFZzhtULWmtGyFrdY1cssqF10

Score
10/10
socelars

Malware Config

Extracted

Family

socelars

C2

https://sa-us-bucket.s3.us-east-2.amazonaws.com/usahd1/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_27703d5957f0113ade3d59b90e5f8ea36806071ee9812a26d1aba7cf08161916
    .zip

    Password: infected

  • 55c952867359623ccc78d72fae96e682.bin
    .exe windows:6 windows x86 arch:x86

    d69e4c13e25f0ad622344ac56118c0df


    Headers

    Imports

    Sections