General

  • Target

    c8cc1b2dc76454583c3968d96af6d095.bin

  • Size

    1.4MB

  • Sample

    240107-desh7sedf4

  • MD5

    c8cc1b2dc76454583c3968d96af6d095

  • SHA1

    bcd0ca7a524dbf55345baa6a0622acee27136eac

  • SHA256

    03bc61c86383045ec0d07802596d98ec5b869144fb9f41330332058d340183f3

  • SHA512

    c7c99a9f4d953373710f4cc3b80b3f8d36eee86491755437ec2a9648df08a804fc03b4ca769cb5df3751643f1c6c44b0907e73ff1947869dfcf9598368d9f883

  • SSDEEP

    24576:76pYjfuKDGp9FGF3KUK2pdAlLnbYt6GH7LPv1l9oUejlPrLs:+pMRGe/4ebLPv1l2UKlDLs

Malware Config

Extracted

Family

socelars

C2

https://sa-us-bucket.s3.us-east-2.amazonaws.com/ujfreids61/

Targets

    • Target

      c8cc1b2dc76454583c3968d96af6d095.bin

    • Size

      1.4MB

    • MD5

      c8cc1b2dc76454583c3968d96af6d095

    • SHA1

      bcd0ca7a524dbf55345baa6a0622acee27136eac

    • SHA256

      03bc61c86383045ec0d07802596d98ec5b869144fb9f41330332058d340183f3

    • SHA512

      c7c99a9f4d953373710f4cc3b80b3f8d36eee86491755437ec2a9648df08a804fc03b4ca769cb5df3751643f1c6c44b0907e73ff1947869dfcf9598368d9f883

    • SSDEEP

      24576:76pYjfuKDGp9FGF3KUK2pdAlLnbYt6GH7LPv1l9oUejlPrLs:+pMRGe/4ebLPv1l2UKlDLs

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks