General

  • Target

    475e4a54f637b0630293b03795deb01151f1b1f45bd2a69ec5a5382ab27434ab

  • Size

    1.4MB

  • Sample

    230321-krn5wahd72

  • MD5

    3a5e2cf120f95c7ae1d9a764b57bc185

  • SHA1

    ee375e86befa07194ded8ea53818fabdac4cce43

  • SHA256

    475e4a54f637b0630293b03795deb01151f1b1f45bd2a69ec5a5382ab27434ab

  • SHA512

    96876014fe3ac1e3f182080a0eff7c77ddc8bc2a1035a0c70849ec130cddc6a087c9ce7b4d9a73e79a4fef30aaa760fbac7ffcbb69e534a08f094d995e8df282

  • SSDEEP

    24576:kGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRLP5hMS6S:PpEUIvU0N9jkpjweXt7775CjS

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/dfgg320/

Targets

    • Target

      475e4a54f637b0630293b03795deb01151f1b1f45bd2a69ec5a5382ab27434ab

    • Size

      1.4MB

    • MD5

      3a5e2cf120f95c7ae1d9a764b57bc185

    • SHA1

      ee375e86befa07194ded8ea53818fabdac4cce43

    • SHA256

      475e4a54f637b0630293b03795deb01151f1b1f45bd2a69ec5a5382ab27434ab

    • SHA512

      96876014fe3ac1e3f182080a0eff7c77ddc8bc2a1035a0c70849ec130cddc6a087c9ce7b4d9a73e79a4fef30aaa760fbac7ffcbb69e534a08f094d995e8df282

    • SSDEEP

      24576:kGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRLP5hMS6S:PpEUIvU0N9jkpjweXt7775CjS

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks