Extracted

• • Target

    04b6f3963ed68d98769263abdbd60560e8b8fef00b5c5b5dec1c0476a74aa135

  • Size

    697KB

  • MD5

    e30da47c23c3d8303567bec86fc347e7

  • SHA1

    524eb1363a2ad19322bb7d234ba32182e2a7e1e6

  • SHA256

    04b6f3963ed68d98769263abdbd60560e8b8fef00b5c5b5dec1c0476a74aa135

  • SHA512

    38039dcd3f5a787334eff8cf3e6d2b17063f043f7d44ae843c7d2cb22eefa91d444d6e4cdbc038a75cef028bb7480b96b101e3ae5091a60871cfbfed5629d62c

  • SSDEEP

    12288:5h3OO//rLMPou0reXiajlz3u+pPuq9klVFOkvP5coCIWvPkGypBU9tSqSrJn1tdF:5lOOnPDu0rebZF2q9klV4+CoCJvcb09E

  Score

  10^/10

  socelarsspywarestealerupx

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2