Overview

overview

10

Static

static

10

17a3187884...f2.exe

windows7_x64

10

17a3187884...f2.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17a3187884e7424eb89cabfd006a103d861237c4c8eb5e3b3926cb6f1401fbf2

  • Size

    1.4MB

  • Sample

    220608-y29q8afdgq

  • MD5

    7bfae18f2ad599fa7f9ebd959e02a522

  • SHA1

    f5e56e7e19eb8808e266ba8ab5218587e9539c7c

  • SHA256

    17a3187884e7424eb89cabfd006a103d861237c4c8eb5e3b3926cb6f1401fbf2

  • SHA512

    fbde566bfaabde30ef28cfb99a43cb45a758e7aac160e91a953df32aa14bce4721e4b701198f4711b9e6e9016cd87747242df6f5c624ea18cc3758b2f830cfcb

Score
10/10
socelarsstealer

Malware Config

Extracted

Family

socelars

C2

https://sa-us-bucket.s3.us-east-2.amazonaws.com/qwwgh/

Targets

    • Target

      17a3187884e7424eb89cabfd006a103d861237c4c8eb5e3b3926cb6f1401fbf2

    • Size

      1.4MB

    • MD5

      7bfae18f2ad599fa7f9ebd959e02a522

    • SHA1

      f5e56e7e19eb8808e266ba8ab5218587e9539c7c

    • SHA256

      17a3187884e7424eb89cabfd006a103d861237c4c8eb5e3b3926cb6f1401fbf2

    • SHA512

      fbde566bfaabde30ef28cfb99a43cb45a758e7aac160e91a953df32aa14bce4721e4b701198f4711b9e6e9016cd87747242df6f5c624ea18cc3758b2f830cfcb

    Score
    10/10
    socelarsstealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks