Extracted

• • Target

    a68f0c695abaae3d0d9edda28e2ae749

  • Size

    1.4MB

  • MD5

    a68f0c695abaae3d0d9edda28e2ae749

  • SHA1

    2b510c20e54356ef589ac143950c31551377b24e

  • SHA256

    78c8a40690556bd5f469c65bdaec36cfd580f828280dfef18fe9cc433708c17a

  • SHA512

    63a1d4c85e152f6501d0cc6ef07e515ece9637e1f9607535135c192bceb0f8ab2d13b37327371caa078ab80472731b985640b1abcb9528adc6dc10e71bbf4ef4

  • SSDEEP

    24576:ZRp2fYlh5hJYrsWSlTeTmvL26IZX8W6jO2okW1negMdwpVXN:rp1v1ji5jtF1nQeptN

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2