General

  • Target

    a8310f7d361e090f03ce31ceda299125ccfc430a7ebd829529e01e98c9cdbfe3

  • Size

    1.5MB

  • Sample

    211021-1azs2sbfhq

  • MD5

    dafa941a30e4da68249ef7e5477ba2ec

  • SHA1

    7c893cd3d2df5387f4095d06e7903f65deca92ea

  • SHA256

    a8310f7d361e090f03ce31ceda299125ccfc430a7ebd829529e01e98c9cdbfe3

  • SHA512

    4f7df1166d4dd26ad810b55022e893d0b5662adcdf12d076e1fec8983387f9be1b7a8ac6a486a64e7ecbc226406bbeaafe27c1ff57143aa65d4d7cc91478dad3

Malware Config

Targets

    • Target

      a8310f7d361e090f03ce31ceda299125ccfc430a7ebd829529e01e98c9cdbfe3

    • Size

      1.5MB

    • MD5

      dafa941a30e4da68249ef7e5477ba2ec

    • SHA1

      7c893cd3d2df5387f4095d06e7903f65deca92ea

    • SHA256

      a8310f7d361e090f03ce31ceda299125ccfc430a7ebd829529e01e98c9cdbfe3

    • SHA512

      4f7df1166d4dd26ad810b55022e893d0b5662adcdf12d076e1fec8983387f9be1b7a8ac6a486a64e7ecbc226406bbeaafe27c1ff57143aa65d4d7cc91478dad3

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks