General

  • Target

    d0595746f50845e64caa07fb456a8c123ae1a24a3c0fd338d573f398fdcac508

  • Size

    1.4MB

  • Sample

    230101-rxzbcsbh88

  • MD5

    6928f38a9e8e337794c3ae96e3dd04d4

  • SHA1

    ee8093f8477ee5fe802083f390dbbc8aafd0d238

  • SHA256

    d0595746f50845e64caa07fb456a8c123ae1a24a3c0fd338d573f398fdcac508

  • SHA512

    911db1d5c9f41bc498c9eacea7090dfb94552fe545d9499d4a582fdeede40fd27fd22365fb91bfe750198a01a176beb6171c9a256929f870764bddec24eba017

  • SSDEEP

    24576:gJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjaxEqBbF:gup62ESMTjTPjaOqNF

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadffew26/

Targets

    • Target

      d0595746f50845e64caa07fb456a8c123ae1a24a3c0fd338d573f398fdcac508

    • Size

      1.4MB

    • MD5

      6928f38a9e8e337794c3ae96e3dd04d4

    • SHA1

      ee8093f8477ee5fe802083f390dbbc8aafd0d238

    • SHA256

      d0595746f50845e64caa07fb456a8c123ae1a24a3c0fd338d573f398fdcac508

    • SHA512

      911db1d5c9f41bc498c9eacea7090dfb94552fe545d9499d4a582fdeede40fd27fd22365fb91bfe750198a01a176beb6171c9a256929f870764bddec24eba017

    • SSDEEP

      24576:gJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjaxEqBbF:gup62ESMTjTPjaOqNF

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks