General

  • Target

    0abdfce62536624bbfc8b313265fcf067dde15c3ae820f70088eeebd932fbfa9

  • Size

    570KB

  • Sample

    240221-jdgm7sch71

  • MD5

    ba172fe67887f9e64b2a018e4b46ca76

  • SHA1

    63190409cd88478191b0311c0d2482a41b7b81db

  • SHA256

    0abdfce62536624bbfc8b313265fcf067dde15c3ae820f70088eeebd932fbfa9

  • SHA512

    6942fce34f6410e436b8a789431a8d45d7e06b9ad41e9d3f9820cb1aba1c5bd7e7bf0d24f1957420f7682655c253ee1d7acc3b0a3b1a79a26999c268346487ff

  • SSDEEP

    12288:SqgvflaO//G9Bq2Spgnu/X2CWJscuzwhdUvAROYyz8jm3hdzgyvkwhCZ7aXINMXy:yYOnGTq2SinsGCWJsjUhuvAR7yQQsiCE

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/dfgg320/

Targets

    • Target

      0abdfce62536624bbfc8b313265fcf067dde15c3ae820f70088eeebd932fbfa9

    • Size

      570KB

    • MD5

      ba172fe67887f9e64b2a018e4b46ca76

    • SHA1

      63190409cd88478191b0311c0d2482a41b7b81db

    • SHA256

      0abdfce62536624bbfc8b313265fcf067dde15c3ae820f70088eeebd932fbfa9

    • SHA512

      6942fce34f6410e436b8a789431a8d45d7e06b9ad41e9d3f9820cb1aba1c5bd7e7bf0d24f1957420f7682655c253ee1d7acc3b0a3b1a79a26999c268346487ff

    • SSDEEP

      12288:SqgvflaO//G9Bq2Spgnu/X2CWJscuzwhdUvAROYyz8jm3hdzgyvkwhCZ7aXINMXy:yYOnGTq2SinsGCWJsjUhuvAR7yQQsiCE

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks