General

  • Target

    f11c2940c230ad0b344084112566c68f682e96f104ccbf22347ded790a2d1868

  • Size

    1.4MB

  • Sample

    221105-g4yy3aecd6

  • MD5

    79904c95c0095bc74f26e1abf663f137

  • SHA1

    95017a0757596583ac5d84118045070734a09bc0

  • SHA256

    f11c2940c230ad0b344084112566c68f682e96f104ccbf22347ded790a2d1868

  • SHA512

    66a75f87fc333db165ad340bacfcb9981a129461566d8328b63a049182f9e32c44dc93ea08446c78014dde022fb94749bff611f36d535ab96d4ab378f0956486

  • SSDEEP

    24576:BQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKeJzqBH0:upcEiKdaTmPPKedqZ0

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadew1013/

Targets

    • Target

      f11c2940c230ad0b344084112566c68f682e96f104ccbf22347ded790a2d1868

    • Size

      1.4MB

    • MD5

      79904c95c0095bc74f26e1abf663f137

    • SHA1

      95017a0757596583ac5d84118045070734a09bc0

    • SHA256

      f11c2940c230ad0b344084112566c68f682e96f104ccbf22347ded790a2d1868

    • SHA512

      66a75f87fc333db165ad340bacfcb9981a129461566d8328b63a049182f9e32c44dc93ea08446c78014dde022fb94749bff611f36d535ab96d4ab378f0956486

    • SSDEEP

      24576:BQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKeJzqBH0:upcEiKdaTmPPKedqZ0

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks