General

  • Target

    4388239f7c85e0051fb9e259de32f0c6bd2a959f3e934d715c57320faa39487c

  • Size

    1.4MB

  • Sample

    221031-drg81aahbl

  • MD5

    61ef7456436093983701871a8e3e5086

  • SHA1

    514cc8713f1c30a02574c376f03ce2fa704a5643

  • SHA256

    4388239f7c85e0051fb9e259de32f0c6bd2a959f3e934d715c57320faa39487c

  • SHA512

    e28204643ae4194e2f9bbf82c2a7bae3a6e25231eff1ef57f696121dff59c035c9e029858e243b6f2815a5c1a30672fafd986e2a67556ffeca9c53fac0012fa7

  • SSDEEP

    24576:iJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjaF8qBRE:iup62ESMTjTPjaKqHE

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadew1013/

Targets

    • Target

      4388239f7c85e0051fb9e259de32f0c6bd2a959f3e934d715c57320faa39487c

    • Size

      1.4MB

    • MD5

      61ef7456436093983701871a8e3e5086

    • SHA1

      514cc8713f1c30a02574c376f03ce2fa704a5643

    • SHA256

      4388239f7c85e0051fb9e259de32f0c6bd2a959f3e934d715c57320faa39487c

    • SHA512

      e28204643ae4194e2f9bbf82c2a7bae3a6e25231eff1ef57f696121dff59c035c9e029858e243b6f2815a5c1a30672fafd986e2a67556ffeca9c53fac0012fa7

    • SSDEEP

      24576:iJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjaF8qBRE:iup62ESMTjTPjaKqHE

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks