Extracted

• • Target

    88d3db212ceae3e3fd22ad246bb9a6fb674845b6fb59ce789e132d2f6b00c1e7

  • Size

    716KB

  • MD5

    cf45e274907f0e7617c65aff09dea3c9

  • SHA1

    5e9718ec8de99349d08ddbbcc1e037f284c7e0cb

  • SHA256

    88d3db212ceae3e3fd22ad246bb9a6fb674845b6fb59ce789e132d2f6b00c1e7

  • SHA512

    79a79c42c184098f75b70b8cc77a4ca3a14cab968c69524b1654d7b5c3942ebd68126b3320f9b371bec4ba3e149df872319db562e8bc21c4ac6c2f66029b16bf

  • SSDEEP

    12288:Ggu3SyqFkVKLj4Feawzv1ztGwmnjpSr5LCRmO7vuArkBKfoeY:GyL31tzYjcCRlqArkAf+

  Score

  10^/10

  socelarsspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2