Extracted

• • Target

    a03c0f4cc2bd31e28f0be893e4693980

  • Size

    1.4MB

  • MD5

    a03c0f4cc2bd31e28f0be893e4693980

  • SHA1

    07b73eae227a06e299e4a3f2d0b5bf7065aefd8f

  • SHA256

    7f0f596c1ad50d7d614c242723a13b36962311d55a075904fd505238623c8af1

  • SHA512

    fa5f952bfafb3dc5639dd8189fa6cf82797ad8c3ee05456df25d53c57af2d96bf912ecbadd145581c8bc2d91bd71c880c4b17a5280d8abbf7950eab4cbe41425

  • SSDEEP

    24576:nIVFA1pqtg/TnMbX0lwyh0FVmEByA1EwFYyOsFTceoCSPZVjQVYfukz:GFA1pvTMbOwa0TmUyMYEh1oCSPnQVY2s

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2