General

  • Target

    7a08887109b9bf1b823f6d9a0f9c3e80e658ed29ef71c017663cd3fd951c192b

  • Size

    1.4MB

  • Sample

    221226-hst2eafg2t

  • MD5

    3f1ad0d7f26b6d8f0cb88881e2362cf8

  • SHA1

    a7bb7edcc0b3abc24bc3e18d4d110c90bd426946

  • SHA256

    7a08887109b9bf1b823f6d9a0f9c3e80e658ed29ef71c017663cd3fd951c192b

  • SHA512

    4bc5ffb23facc9bf040f38a721e163827a04ecffb9ec16856d0b8061c5f30fac176a2c3bad926a53cc8d4724355a980b8ae186c95092512b55b7d83b9e1c00e3

  • SSDEEP

    24576:QQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKeJ/qB77:ppcEiKdaTmPPKehqF7

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadffew26/

Targets

    • Target

      7a08887109b9bf1b823f6d9a0f9c3e80e658ed29ef71c017663cd3fd951c192b

    • Size

      1.4MB

    • MD5

      3f1ad0d7f26b6d8f0cb88881e2362cf8

    • SHA1

      a7bb7edcc0b3abc24bc3e18d4d110c90bd426946

    • SHA256

      7a08887109b9bf1b823f6d9a0f9c3e80e658ed29ef71c017663cd3fd951c192b

    • SHA512

      4bc5ffb23facc9bf040f38a721e163827a04ecffb9ec16856d0b8061c5f30fac176a2c3bad926a53cc8d4724355a980b8ae186c95092512b55b7d83b9e1c00e3

    • SSDEEP

      24576:QQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKeJ/qB77:ppcEiKdaTmPPKehqF7

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks