General

  • Target

    c8beba99fbe98c2ff7c71a3e8cbd0f68c1487dd5ab62a7c923a71aa9a7f4ce93

  • Size

    1.4MB

  • Sample

    230515-mhjvxafg75

  • MD5

    69b7d6298d379bfb591b90b89c236235

  • SHA1

    ff752a46673808870c5a6ae7ceeed1927b4fdf44

  • SHA256

    c8beba99fbe98c2ff7c71a3e8cbd0f68c1487dd5ab62a7c923a71aa9a7f4ce93

  • SHA512

    d140f96d5cab5d801434971abb5670e72c17831e458113068ecd51553d010daeb8e44d5a72d558dc83546c2d497b16eb7de1b12dbef68c0756a0af2b2a21a5dc

  • SSDEEP

    24576:/VYkTpy0OVnKhXJ04BJFKA3wRKB7a9WscrmCqeQrEfw5h6tOW:1pJOl8xFMRy/SeQgI54wW

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/uysf428/

Targets

    • Target

      c8beba99fbe98c2ff7c71a3e8cbd0f68c1487dd5ab62a7c923a71aa9a7f4ce93

    • Size

      1.4MB

    • MD5

      69b7d6298d379bfb591b90b89c236235

    • SHA1

      ff752a46673808870c5a6ae7ceeed1927b4fdf44

    • SHA256

      c8beba99fbe98c2ff7c71a3e8cbd0f68c1487dd5ab62a7c923a71aa9a7f4ce93

    • SHA512

      d140f96d5cab5d801434971abb5670e72c17831e458113068ecd51553d010daeb8e44d5a72d558dc83546c2d497b16eb7de1b12dbef68c0756a0af2b2a21a5dc

    • SSDEEP

      24576:/VYkTpy0OVnKhXJ04BJFKA3wRKB7a9WscrmCqeQrEfw5h6tOW:1pJOl8xFMRy/SeQgI54wW

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks