General

  • Target

    7b2a6dee11980f0299c99497b96a50bcce91ed4576912cbe4ae49081a6070c18.zip

  • Size

    729KB

  • MD5

    db1ed0c031c9029ab9c43c6e4e3a724c

  • SHA1

    f6b814603e137cb29fafd4f6d5c67a4c8edc4be3

  • SHA256

    7b2a6dee11980f0299c99497b96a50bcce91ed4576912cbe4ae49081a6070c18

  • SHA512

    8e9783fe6b8b6174744b8845b3569c2e7367eea3e5f2051288ce66ffc80ffa4e9fd7cd4de48af3d5eccad50b8e5c7cd2c3d9d5f4c06e40aa667457763fde4a57

  • SSDEEP

    12288:NJRKQFQCglhh0qfogeBSNIVbGRz/pmNVHcROzwxg4EinK6uMDETEJ:NDQCeYYobBxVKh/XAcx7nK6uMDEM

Score
10/10

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.wygexde.xyz/

Signatures

  • Socelars family
  • Socelars payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b2a6dee11980f0299c99497b96a50bcce91ed4576912cbe4ae49081a6070c18.zip
    .zip

    Password: infected

  • 88d9141e63c5e2d05294b43d85ffc2604c3eda3b2cac69149743e3990b547212.exe
    .exe windows:6 windows x86 arch:x86

    4f0608b5638c60342069764638589dcf


    Headers

    Imports

    Sections