Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5555faaaa506e1b8653b48ed860f4b07.exe

  • Size

    1.4MB

  • Sample

    230106-lnrx2afe97

  • MD5

    5555faaaa506e1b8653b48ed860f4b07

  • SHA1

    1029a7b2fc3ea4d1feaffa7c2835995938962a90

  • SHA256

    bd15502cf02e87572533e4c1d36e9b3c66ca26875ae7b15f68e2ba99a690d091

  • SHA512

    48b79daa583715c27fda987d468ec67e86612b40f4fdcb883d953757c7a6b114e7f8f85f2483c857e419155abf2499bd017b9e1de834ebecd3155f0e23ba5cc7

  • SSDEEP

    24576:TJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPja1dqBND:Tup62ESMTjTPjaDqnD

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadffew26/

Targets

    • Target

      5555faaaa506e1b8653b48ed860f4b07.exe

    • Size

      1.4MB

    • MD5

      5555faaaa506e1b8653b48ed860f4b07

    • SHA1

      1029a7b2fc3ea4d1feaffa7c2835995938962a90

    • SHA256

      bd15502cf02e87572533e4c1d36e9b3c66ca26875ae7b15f68e2ba99a690d091

    • SHA512

      48b79daa583715c27fda987d468ec67e86612b40f4fdcb883d953757c7a6b114e7f8f85f2483c857e419155abf2499bd017b9e1de834ebecd3155f0e23ba5cc7

    • SSDEEP

      24576:TJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPja1dqBND:Tup62ESMTjTPjaDqnD

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks