Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

AXmudvi_Mx...uH.exe

windows7-x64

10

AXmudvi_Mx...uH.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_152f1e7aeed37a32e3d2153a7c05fe4dacb44a2dcfdf63ed31f91b28d36fcf21

  • Size

    708KB

  • MD5

    3d7c635c13fbb97f58c21e6a9b3763ad

  • SHA1

    6623251b6926c1cdd0f2188bc085668ae766970d

  • SHA256

    152f1e7aeed37a32e3d2153a7c05fe4dacb44a2dcfdf63ed31f91b28d36fcf21

  • SHA512

    473eeb3e94de2bfc10064b63e704cfd37352ab32f7d26b1ef3b7ec1a73bc2f04a5b00e5ffcc367322b2bc16fa7a497b37980cf9bf50433d425860ae16c7e3d54

  • SSDEEP

    12288:F8dOQ3TUOxJhAzEvhrGr2NXqgRaw8TqOb0XkzslsSKw2L29Zd3t2qvj:F8AQ3TTAEZiURwTqOcbrjtd2qvj

Score
10/10
socelars

Malware Config

Extracted

Family

socelars

C2

http://www.ecgbg.com/

Signatures

  • Socelars family
    socelars
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_152f1e7aeed37a32e3d2153a7c05fe4dacb44a2dcfdf63ed31f91b28d36fcf21
    .zip

    Password: infected

  • AXmudvi_MxQYK2Swucq9CluH.bin
    .exe windows:6 windows x86 arch:x86

    d69e4c13e25f0ad622344ac56118c0df


    Headers

    Imports

    Sections