General

  • Target

    f7c4120d89af261c1b5e437682e827f991c0f0737396c5c8a7eb30cee92c3ce0

  • Size

    1.6MB

  • Sample

    240229-d5sxnace34

  • MD5

    71b34f3f5fa5aac53674b7669b663477

  • SHA1

    802e5112517305e0dcfea4b0b2dfc8bdf07473d8

  • SHA256

    f7c4120d89af261c1b5e437682e827f991c0f0737396c5c8a7eb30cee92c3ce0

  • SHA512

    9d2390639c838795121ea3b82280de75b565fba9b3ba3116e57bcf8bfd3d2410606986a27d0ebf1a1f12b8d4365269e030ae36101488e239aa75d7af327e8c1b

  • SSDEEP

    24576:xQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKu4FjqBjn:epcEiKdaTmPPKu4hqpn

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sadffew26/

Targets

    • Target

      f7c4120d89af261c1b5e437682e827f991c0f0737396c5c8a7eb30cee92c3ce0

    • Size

      1.6MB

    • MD5

      71b34f3f5fa5aac53674b7669b663477

    • SHA1

      802e5112517305e0dcfea4b0b2dfc8bdf07473d8

    • SHA256

      f7c4120d89af261c1b5e437682e827f991c0f0737396c5c8a7eb30cee92c3ce0

    • SHA512

      9d2390639c838795121ea3b82280de75b565fba9b3ba3116e57bcf8bfd3d2410606986a27d0ebf1a1f12b8d4365269e030ae36101488e239aa75d7af327e8c1b

    • SSDEEP

      24576:xQpyBPGxrdclka3bP2WwgTKbgtD8rs1gPPKu4FjqBjn:epcEiKdaTmPPKu4hqpn

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks