Overview

overview

10

Static

static

10

dridex

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2e863a28aa6dcf671c8cf4a897fe444b1b3d2a2c0c1dfd5171eca15631c7a17d
  • Size 1.4MB
  • Sample221122-ddnhvsgc65
  • SHA256 2e863a28aa6dcf671c8cf4a897fe444b1b3d2a2c0c1dfd5171eca15631c7a17d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
socelarsspywarestealer

Malware Config

Extracted

Family

  • socelars

C2

  • https://hdbywe.s3.us-west-2.amazonaws.com/asdhfr1115/

Targets

    • Target
      2e863a28aa6dcf671c8cf4a897fe444b1b3d2a2c0c1dfd5171eca15631c7a17d
    • Size 1.4MB
    • SHA256 2e863a28aa6dcf671c8cf4a897fe444b1b3d2a2c0c1dfd5171eca15631c7a17d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    socelarsspywarestealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks