Behavioral task
behavioral1
Sample
2024-12-26_36e29d54dbe9ddcf28673e037b3226e3_avoslocker_luca-stealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-12-26_36e29d54dbe9ddcf28673e037b3226e3_avoslocker_luca-stealer.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-12-26_36e29d54dbe9ddcf28673e037b3226e3_avoslocker_luca-stealer
-
Size
1.6MB
-
MD5
36e29d54dbe9ddcf28673e037b3226e3
-
SHA1
e41cdf484b28c5a347d353d8475ddae8c7322c21
-
SHA256
bc651f816f18a88417455aab0824840331a03be13ba491e930a6b0fc7b6be9a6
-
SHA512
9092e6dbe14f17ba8fef6a6ce7da52b95e9862b51c5e57d26f118b17f71a63a4a74588be0e74944b490de18dc44ae5e3c8f9b76aff6ce3947d56b4af00feb080
-
SSDEEP
24576:rsLp0FasdJu/+/dfMs2KLoyaU/5DeTgtMyPtTvlno/3:opncZO+HCyPtTvdoP
Malware Config
Signatures
-
Socelars family
-
Socelars payload 1 IoCs
resource yara_rule sample family_socelars -
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-12-26_36e29d54dbe9ddcf28673e037b3226e3_avoslocker_luca-stealer
Files
-
2024-12-26_36e29d54dbe9ddcf28673e037b3226e3_avoslocker_luca-stealer.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 606KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE