General

  • Target

    038e210c853e8437422d731b428ec48e.exe

  • Size

    1.4MB

  • Sample

    220917-jd367sdcdr

  • MD5

    038e210c853e8437422d731b428ec48e

  • SHA1

    f6a4a5eb72ab1f42c21a0969e784db6f3a3a96dd

  • SHA256

    4fa228272754d0f9d1770c7e4dc29cc8be99a72635d95cf6bbd8685ef95b4e9e

  • SHA512

    c3af2abbc04e43a78e00d75b0df7e09ba8113c1d98cbd106dda0ac801a0bab4096c9dd2df103ba49ff62b71ca74f156fcc6e229a86695a0355bb1f2983b31ef4

  • SSDEEP

    24576:88pq1ZW6rIczqGTQP2MZt7qjgtD8QH1TuPDLhtuDKYtW9Tn:NpylfJdaLFuPPhwDTW9Tn

Malware Config

Extracted

Family

socelars

C2

https://dfgrthres.s3.eu-west-3.amazonaws.com/asdhs909/

Targets

    • Target

      038e210c853e8437422d731b428ec48e.exe

    • Size

      1.4MB

    • MD5

      038e210c853e8437422d731b428ec48e

    • SHA1

      f6a4a5eb72ab1f42c21a0969e784db6f3a3a96dd

    • SHA256

      4fa228272754d0f9d1770c7e4dc29cc8be99a72635d95cf6bbd8685ef95b4e9e

    • SHA512

      c3af2abbc04e43a78e00d75b0df7e09ba8113c1d98cbd106dda0ac801a0bab4096c9dd2df103ba49ff62b71ca74f156fcc6e229a86695a0355bb1f2983b31ef4

    • SSDEEP

      24576:88pq1ZW6rIczqGTQP2MZt7qjgtD8QH1TuPDLhtuDKYtW9Tn:NpylfJdaLFuPPhwDTW9Tn

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks