Overview

overview

10

Static

static

10

8194c5a8a1...1f.exe

windows7-x64

10

8194c5a8a1...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8194c5a8a145a9c76349c08afc5caa1f.exe

  • Size

    675KB

  • Sample

    221205-k82gjaad4s

  • MD5

    8194c5a8a145a9c76349c08afc5caa1f

  • SHA1

    059ec1283f5d812533d662c3d569eb286973602e

  • SHA256

    4651270dd4ecec382fc2b62f0f946379107945dea1b36f168be59db502be81ee

  • SHA512

    1443cb59203de429f7f12e75af0912a372e83d6fd74508f514affdad6545c0883b77fd3b227be709145882088868a5c90389b4a527e5621e14ad5127237b6d24

  • SSDEEP

    12288:xqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjqOe6zUDmg:x5kxyZFe+hcGEXGwiY2j25

Score
10/10
socelarsspywarestealerupx

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sauydga27/

Targets

    • Target

      8194c5a8a145a9c76349c08afc5caa1f.exe

    • Size

      675KB

    • MD5

      8194c5a8a145a9c76349c08afc5caa1f

    • SHA1

      059ec1283f5d812533d662c3d569eb286973602e

    • SHA256

      4651270dd4ecec382fc2b62f0f946379107945dea1b36f168be59db502be81ee

    • SHA512

      1443cb59203de429f7f12e75af0912a372e83d6fd74508f514affdad6545c0883b77fd3b227be709145882088868a5c90389b4a527e5621e14ad5127237b6d24

    • SSDEEP

      12288:xqlMhfymUyZzk8ri+hcGgn9cJBJYGahyHY2oSjqOe6zUDmg:x5kxyZFe+hcGEXGwiY2j25

    Score
    10/10
    socelarsstealerupxspyware

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Socelars payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks