General

  • Target

    b1141f0d6b9533f0da157c291ecdb182.exe

  • Size

    1.4MB

  • Sample

    230403-pxx27aeg54

  • MD5

    b1141f0d6b9533f0da157c291ecdb182

  • SHA1

    9cd8bfe22d06fa45d733c4a05080e235e69d19a2

  • SHA256

    7d19ffbaaeb9cb5e046062746efcf246596ebd5c6bdb658e266d3c532d19c9a7

  • SHA512

    cdd13e7cd4f238ae1d34095e3361d536633e185d4b36b852c9b36ed5c24077a65a408de25c221ea190888ca90be534217ad5cd4e5999b6cf675956a9b18d653f

  • SSDEEP

    24576:3GU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRbv5hwSQ:mpEUIvU0N9jkpjweXt77L5SF

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/dfgg320/

Targets

    • Target

      b1141f0d6b9533f0da157c291ecdb182.exe

    • Size

      1.4MB

    • MD5

      b1141f0d6b9533f0da157c291ecdb182

    • SHA1

      9cd8bfe22d06fa45d733c4a05080e235e69d19a2

    • SHA256

      7d19ffbaaeb9cb5e046062746efcf246596ebd5c6bdb658e266d3c532d19c9a7

    • SHA512

      cdd13e7cd4f238ae1d34095e3361d536633e185d4b36b852c9b36ed5c24077a65a408de25c221ea190888ca90be534217ad5cd4e5999b6cf675956a9b18d653f

    • SSDEEP

      24576:3GU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRbv5hwSQ:mpEUIvU0N9jkpjweXt77L5SF

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks