General

  • Target

    18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17

  • Size

    570KB

  • Sample

    240221-jdhv9sdd39

  • MD5

    bd9f30a235029603dda71e63daabaa51

  • SHA1

    3816387e56c0368edc67e7b9a3ae3077d51a2d31

  • SHA256

    18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17

  • SHA512

    9877af6e17d6d2b5234b34b768766130a88fa6eabdb43f9caeed80b5b2ebd0e2bb0dfde5efcf85a23aa0caffc396fca76ac2f02ebcc435100f92628b5bb84753

  • SSDEEP

    12288:x7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI5FS9ppLBZI8hoS:perkJVraHFABDGCkFV4wrpO8

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadfe410/

Targets

    • Target

      18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17

    • Size

      570KB

    • MD5

      bd9f30a235029603dda71e63daabaa51

    • SHA1

      3816387e56c0368edc67e7b9a3ae3077d51a2d31

    • SHA256

      18ef5e923c7a58575ff265adc763b9b476d39c9f3726c9cfce7374543c061d17

    • SHA512

      9877af6e17d6d2b5234b34b768766130a88fa6eabdb43f9caeed80b5b2ebd0e2bb0dfde5efcf85a23aa0caffc396fca76ac2f02ebcc435100f92628b5bb84753

    • SSDEEP

      12288:x7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI5FS9ppLBZI8hoS:perkJVraHFABDGCkFV4wrpO8

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks