Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dec3f337796ef2239a943a027d2aaff1.exe

  • Size

    1.4MB

  • Sample

    220929-l9m6zabeap

  • MD5

    dec3f337796ef2239a943a027d2aaff1

  • SHA1

    27c719957e9ce362d70f2c0a438e5b7734d4da3d

  • SHA256

    81314781884347ef9ad8d2366315b92a312587d3f457251434d47cb86dd79b9c

  • SHA512

    e22c57aed75dd9d7daacc4ddadc3eca3229ab93582f169311a4b3691d1debd5cd2a595137033824cd9a69c586623c756c829c4d19d3df3b55b3a9838599abb49

  • SSDEEP

    24576:n3MDpobXmmlFSUacscm2ns1CqSzqrNe+9IxPGxRbDKYPs0eDbnc:n2pI3t5XkixPGxZDlgnc

Malware Config

Extracted

Family

socelars

C2

https://dfgrthres.s3.eu-west-3.amazonaws.com/fdgds919/

Targets

    • Target

      dec3f337796ef2239a943a027d2aaff1.exe

    • Size

      1.4MB

    • MD5

      dec3f337796ef2239a943a027d2aaff1

    • SHA1

      27c719957e9ce362d70f2c0a438e5b7734d4da3d

    • SHA256

      81314781884347ef9ad8d2366315b92a312587d3f457251434d47cb86dd79b9c

    • SHA512

      e22c57aed75dd9d7daacc4ddadc3eca3229ab93582f169311a4b3691d1debd5cd2a595137033824cd9a69c586623c756c829c4d19d3df3b55b3a9838599abb49

    • SSDEEP

      24576:n3MDpobXmmlFSUacscm2ns1CqSzqrNe+9IxPGxRbDKYPs0eDbnc:n2pI3t5XkixPGxZDlgnc

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks