Overview

overview

10

Static

static

10

1c1760cf51...7c.exe

windows7_x64

10

1c1760cf51...7c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c1760cf5116075999b68106daa7fdb7daf73d6ba9a9ccfe0ae86604cd9ac87c

  • Size

    1.4MB

  • Sample

    220607-t5azvagfgl

  • MD5

    6002866fb2b4024e846c81e94a51d66a

  • SHA1

    07abb5bfb9b10aac91d5028c6aa88c535a17d549

  • SHA256

    1c1760cf5116075999b68106daa7fdb7daf73d6ba9a9ccfe0ae86604cd9ac87c

  • SHA512

    506fb822773848631ef714c6ba4d173c768c0c834926b4bbba93cbca31876787b35c3468c2ec86f600bdd6931d0a5fb02f9086b1a569ec77ac6d6a1651ace087

Score
10/10
socelarsspywarestealersuricata

Malware Config

Extracted

Family

socelars

C2

http://www.fddnice.pw/

http://www.sokoinfo.pw/

http://www.zzhlike.pw/

http://www.wygexde.xyz/

Targets

    • Target

      1c1760cf5116075999b68106daa7fdb7daf73d6ba9a9ccfe0ae86604cd9ac87c

    • Size

      1.4MB

    • MD5

      6002866fb2b4024e846c81e94a51d66a

    • SHA1

      07abb5bfb9b10aac91d5028c6aa88c535a17d549

    • SHA256

      1c1760cf5116075999b68106daa7fdb7daf73d6ba9a9ccfe0ae86604cd9ac87c

    • SHA512

      506fb822773848631ef714c6ba4d173c768c0c834926b4bbba93cbca31876787b35c3468c2ec86f600bdd6931d0a5fb02f9086b1a569ec77ac6d6a1651ace087

    Score
    10/10
    socelarsspywarestealersuricata

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

      suricata

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks