General

  • Target

    ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab

  • Size

    570KB

  • Sample

    240222-ha4g5ade6t

  • MD5

    c08aa458038e4d9a46af3573265d03c6

  • SHA1

    fae30ccd9f1a2b230e26cdc5ee75656db3ecf069

  • SHA256

    ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab

  • SHA512

    266176c22beae3c874bcf1bc93a1538ee7f34781869dbbf4845e43759d720b218a6fceb32f292edade227da9438d674ef360807beed5e108f34c1147211de8ad

  • SSDEEP

    12288:G7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI1zjjgPUYSGoS:serkJVraHFABDGCkFV4w+UUYS

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadfe410/

Targets

    • Target

      ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab

    • Size

      570KB

    • MD5

      c08aa458038e4d9a46af3573265d03c6

    • SHA1

      fae30ccd9f1a2b230e26cdc5ee75656db3ecf069

    • SHA256

      ee06f493c0933e9a790f322fa32fb7186f5735a6498dd096d65722380226b2ab

    • SHA512

      266176c22beae3c874bcf1bc93a1538ee7f34781869dbbf4845e43759d720b218a6fceb32f292edade227da9438d674ef360807beed5e108f34c1147211de8ad

    • SSDEEP

      12288:G7zerkKbDkVraNncPQFABDCc+LGZ2FzXJ0w7swXI1zjjgPUYSGoS:serkJVraHFABDGCkFV4w+UUYS

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks