General

  • Target

    31b03f6a6fae46fe00388be20bbd5e8432b816e0cfc056309de6d175e45677e3

  • Size

    1.4MB

  • Sample

    220620-w1tbqsbgf6

  • MD5

    3d33b77fb2fab5484d79b9e8210e071d

  • SHA1

    8ad49eb332c4acced160fccd2cba0df8a579abd7

  • SHA256

    31b03f6a6fae46fe00388be20bbd5e8432b816e0cfc056309de6d175e45677e3

  • SHA512

    fcc60b4466d3279bbdbac5a8ca3a020e9a7844384b463eba39f7d2efd7e519d5d48f942d3c6a67fb5ce732dc8dd55d2d4659213c58d05a807fdfa715cc75c1ae

Score
10/10

Malware Config

Extracted

Family

socelars

C2

https://frertge.s3.eu-west-2.amazonaws.com/asdhbf/

Targets

    • Target

      31b03f6a6fae46fe00388be20bbd5e8432b816e0cfc056309de6d175e45677e3

    • Size

      1.4MB

    • MD5

      3d33b77fb2fab5484d79b9e8210e071d

    • SHA1

      8ad49eb332c4acced160fccd2cba0df8a579abd7

    • SHA256

      31b03f6a6fae46fe00388be20bbd5e8432b816e0cfc056309de6d175e45677e3

    • SHA512

      fcc60b4466d3279bbdbac5a8ca3a020e9a7844384b463eba39f7d2efd7e519d5d48f942d3c6a67fb5ce732dc8dd55d2d4659213c58d05a807fdfa715cc75c1ae

    Score
    10/10
    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Discovery

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks