General

  • Target
    421c54c316ffe813da7690b6113c138af6cc2834cc9208edd8c42224bd6bd5a6
  • Size 1.5MB
  • Sample211119-jdnrhscfc6
  • SHA256 421c54c316ffe813da7690b6113c138af6cc2834cc9208edd8c42224bd6bd5a6
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • socelars

C2
  • http://www.gianninidesign.com/

Targets

    • Target
      421c54c316ffe813da7690b6113c138af6cc2834cc9208edd8c42224bd6bd5a6
    • Size 1.5MB
    • SHA256 421c54c316ffe813da7690b6113c138af6cc2834cc9208edd8c42224bd6bd5a6
    • MD5 SHA1 SHA512
    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up geolocation information via web service

      Uses a legitimate geolocation service to find the infected system's geolocation info.

MITRE ATT&CK Enterprise v6

Tasks