General

  • Target

    a26b1a5af7e93bbda77b5f1639815d77.exe

  • Size

    1.4MB

  • Sample

    210323-h3jpv9d982

  • MD5

    a26b1a5af7e93bbda77b5f1639815d77

  • SHA1

    38773c74da5bcf9cf59ac849507d5491ac13f838

  • SHA256

    4dadde2cc75cc00a99017299ecfe878299c6c6742ce3abbb198cb440b6b3ce4f

  • SHA512

    68a484b2818dc99be4a32e6bc0fda3f98e9220bea1eb83d935b5a7010d15f6f942e4268117b7d085ee32c590c96bb105051199e0c5e621f449aba34d4ea95d01

Malware Config

Targets

    • Target

      a26b1a5af7e93bbda77b5f1639815d77.exe

    • Size

      1.4MB

    • MD5

      a26b1a5af7e93bbda77b5f1639815d77

    • SHA1

      38773c74da5bcf9cf59ac849507d5491ac13f838

    • SHA256

      4dadde2cc75cc00a99017299ecfe878299c6c6742ce3abbb198cb440b6b3ce4f

    • SHA512

      68a484b2818dc99be4a32e6bc0fda3f98e9220bea1eb83d935b5a7010d15f6f942e4268117b7d085ee32c590c96bb105051199e0c5e621f449aba34d4ea95d01

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks