General

  • Target

    11aa18cd6b00fd424f437cc18edaf8ac2ab395743695933e20abc94bf0acdadc

  • Size

    1.4MB

  • Sample

    231031-pmrgnahh89

  • MD5

    93789abbde84977083ca1014adb78b36

  • SHA1

    2ccf6a9639078b3958cab3c52ff1350029a92780

  • SHA256

    11aa18cd6b00fd424f437cc18edaf8ac2ab395743695933e20abc94bf0acdadc

  • SHA512

    6a1e30b7b85dd3cc2690eebf6623285c5d554e13e0e451decb880e3a17ae2f508dc83ec9141d37b6ee1151cf8abf15811f6592ff8ce68244381093794a612c30

  • SSDEEP

    24576:XQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKetzqBRs:ApcEiKdaTmPPKepqjs

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Targets

    • Target

      11aa18cd6b00fd424f437cc18edaf8ac2ab395743695933e20abc94bf0acdadc

    • Size

      1.4MB

    • MD5

      93789abbde84977083ca1014adb78b36

    • SHA1

      2ccf6a9639078b3958cab3c52ff1350029a92780

    • SHA256

      11aa18cd6b00fd424f437cc18edaf8ac2ab395743695933e20abc94bf0acdadc

    • SHA512

      6a1e30b7b85dd3cc2690eebf6623285c5d554e13e0e451decb880e3a17ae2f508dc83ec9141d37b6ee1151cf8abf15811f6592ff8ce68244381093794a612c30

    • SSDEEP

      24576:XQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKetzqBRs:ApcEiKdaTmPPKepqjs

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks