General

  • Target

    a495302584737b70c974d939198a81c7f8fd494f430c3c09d533b2ca886f2cd4

  • Size

    1.4MB

  • Sample

    230506-lyfyhsgf92

  • MD5

    355a63fa85f7611016cfffb8b9285277

  • SHA1

    6ad16429ef50de00bf824654790cda19cff29e70

  • SHA256

    a495302584737b70c974d939198a81c7f8fd494f430c3c09d533b2ca886f2cd4

  • SHA512

    d87ee3d45d20da7656cc5c21d20beb48eb023bdb14309cb593ee798f2111210ce11dec0f230426668bc3034d098502c7e6060766a65792893e43cffc33709901

  • SSDEEP

    24576:tGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRPa5hBSt:wpEUIvU0N9jkpjweXt77i57M

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/uysf428/

Targets

    • Target

      a495302584737b70c974d939198a81c7f8fd494f430c3c09d533b2ca886f2cd4

    • Size

      1.4MB

    • MD5

      355a63fa85f7611016cfffb8b9285277

    • SHA1

      6ad16429ef50de00bf824654790cda19cff29e70

    • SHA256

      a495302584737b70c974d939198a81c7f8fd494f430c3c09d533b2ca886f2cd4

    • SHA512

      d87ee3d45d20da7656cc5c21d20beb48eb023bdb14309cb593ee798f2111210ce11dec0f230426668bc3034d098502c7e6060766a65792893e43cffc33709901

    • SSDEEP

      24576:tGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRPa5hBSt:wpEUIvU0N9jkpjweXt77i57M

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks