General

  • Target

    67c6571e657abe032939e7a439610511ba8b96b85f5d10eff614e2ba710f1953

  • Size

    1.4MB

  • Sample

    221219-gpqn5shd3s

  • MD5

    60982948917a4a2452e62090f0baf7a3

  • SHA1

    ae0ff1694fff84584479cd49735668019a9ce337

  • SHA256

    67c6571e657abe032939e7a439610511ba8b96b85f5d10eff614e2ba710f1953

  • SHA512

    39b6919390fa3f2b595e89fc14bd58709c104bb89cca680b30a3e54ec818a2281b0f55fac92c31c4d17c8e666bee9fac55e6554d12508b731410b1d11041a11b

  • SSDEEP

    24576:eJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjahQqBIWL1:eup62ESMTjTPjaCqeWL1

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Targets

    • Target

      67c6571e657abe032939e7a439610511ba8b96b85f5d10eff614e2ba710f1953

    • Size

      1.4MB

    • MD5

      60982948917a4a2452e62090f0baf7a3

    • SHA1

      ae0ff1694fff84584479cd49735668019a9ce337

    • SHA256

      67c6571e657abe032939e7a439610511ba8b96b85f5d10eff614e2ba710f1953

    • SHA512

      39b6919390fa3f2b595e89fc14bd58709c104bb89cca680b30a3e54ec818a2281b0f55fac92c31c4d17c8e666bee9fac55e6554d12508b731410b1d11041a11b

    • SSDEEP

      24576:eJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjahQqBIWL1:eup62ESMTjTPjaCqeWL1

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks