General

  • Target

    4d7bf0ac8d108ed6087692a6f54b3082.exe

  • Size

    1.4MB

  • Sample

    230306-nqkmvabd8s

  • MD5

    4d7bf0ac8d108ed6087692a6f54b3082

  • SHA1

    b57270c5ae76cb855a13e32dfb50c118d1e7cc9c

  • SHA256

    752c4d76e3b55d27de65002d1b83ce5d617adeb466c2e405400bb45a2debabc8

  • SHA512

    c4985ac6fac2c7e0c1b41ca9f78999d131c380d6c94a77be8f7da81e2c2920ceb810a71ef5cee3316b3933ac33cdd4b41bcbc47d3b9a4a289b557b82acd4c4f0

  • SSDEEP

    24576:8GU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dR3W5hgSr:XpEUIvU0N9jkpjweXt77G5yi

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadef33/

Targets

    • Target

      4d7bf0ac8d108ed6087692a6f54b3082.exe

    • Size

      1.4MB

    • MD5

      4d7bf0ac8d108ed6087692a6f54b3082

    • SHA1

      b57270c5ae76cb855a13e32dfb50c118d1e7cc9c

    • SHA256

      752c4d76e3b55d27de65002d1b83ce5d617adeb466c2e405400bb45a2debabc8

    • SHA512

      c4985ac6fac2c7e0c1b41ca9f78999d131c380d6c94a77be8f7da81e2c2920ceb810a71ef5cee3316b3933ac33cdd4b41bcbc47d3b9a4a289b557b82acd4c4f0

    • SSDEEP

      24576:8GU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dR3W5hgSr:XpEUIvU0N9jkpjweXt77G5yi

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks