Overview

overview

10

Static

static

10

f4c919f143...8a.exe

windows7-x64

10

f4c919f143...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4c919f143c53cfa79256d99ca323a8a.exe

  • Size

    1.4MB

  • Sample

    221115-qf4zvaea79

  • MD5

    f4c919f143c53cfa79256d99ca323a8a

  • SHA1

    68dd896bc52484b2a2ac50c17f943472a2d045ea

  • SHA256

    841d4bb0280045274535c18cba4e8fa06f1f66d4adedb8a039a9534866a01d14

  • SHA512

    924af0cc834a6794766f0a941b17f6f26a0ee3ee13e30aab2cff2bfde2437678561ebab368e2afba71632e26f142e9cdf7f67e59e66cc4e5416583c1df370fe8

  • SSDEEP

    24576:xJSLpwfVWRh0SGQ48Lm2194mKa4qrNkW9NTPjuJDqBH8R:xup62ESMyjTPjuVqBK

Score
10/10
socelarsspywarestealer

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/jsdnjd1105/

Targets

    • Target

      f4c919f143c53cfa79256d99ca323a8a.exe

    • Size

      1.4MB

    • MD5

      f4c919f143c53cfa79256d99ca323a8a

    • SHA1

      68dd896bc52484b2a2ac50c17f943472a2d045ea

    • SHA256

      841d4bb0280045274535c18cba4e8fa06f1f66d4adedb8a039a9534866a01d14

    • SHA512

      924af0cc834a6794766f0a941b17f6f26a0ee3ee13e30aab2cff2bfde2437678561ebab368e2afba71632e26f142e9cdf7f67e59e66cc4e5416583c1df370fe8

    • SSDEEP

      24576:xJSLpwfVWRh0SGQ48Lm2194mKa4qrNkW9NTPjuJDqBH8R:xup62ESMyjTPjuVqBK

    Score
    10/10
    socelarsspywarestealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks