Extracted

• • Target

    8aeb5943e50f456fa19f2832535643e60fbb9aa55afb588e79b77b3e09ae9cea

  • Size

    1.4MB

  • MD5

    e415ffc957f15dd2b4de302e02150a41

  • SHA1

    2a6b974e4453cc771cbe27c1b77cb2dbe220822a

  • SHA256

    8aeb5943e50f456fa19f2832535643e60fbb9aa55afb588e79b77b3e09ae9cea

  • SHA512

    7b2a2a582422b2836fcce48319467f93c032966111f7e3de3e85df7c2653bfcd0cca0920d7b3d6df432d5c00f97b2d642202023d95186d4fb19a6bb8869caf94

  • SSDEEP

    24576:A9z7hp10GnN4BhDEYsN4OikFDEQ/lbCFjWlqIgV0edASvoxygyjTYofy:i7hpVNwh/s6OjFpF2jlJNdASvFgyjE5

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2