General

  • Target

    588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

  • Size

    1.6MB

  • Sample

    240229-zd59kabg9y

  • MD5

    8db7ecc5e5ccf384918220442e9efb96

  • SHA1

    f85ee703eec27e61c5dc6b88041abd41fab75c32

  • SHA256

    588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

  • SHA512

    6907e9ec0f565367978737ed1d5b55c209d211567a0bb6de66bf3a5af7914c57a9a694edf5e55821ba2ee20359e2b032d5f0c64e9edcfacabc7154f034216e79

  • SSDEEP

    24576:pJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgDReqBzn:pup62ESMTjTPjgDsqVn

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Targets

    • Target

      588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

    • Size

      1.6MB

    • MD5

      8db7ecc5e5ccf384918220442e9efb96

    • SHA1

      f85ee703eec27e61c5dc6b88041abd41fab75c32

    • SHA256

      588c82c8d87043ac9de9d7e5d5e2ae20d7d2ab79c16d8cbcf3c40cf0ac7eb246

    • SHA512

      6907e9ec0f565367978737ed1d5b55c209d211567a0bb6de66bf3a5af7914c57a9a694edf5e55821ba2ee20359e2b032d5f0c64e9edcfacabc7154f034216e79

    • SSDEEP

      24576:pJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgDReqBzn:pup62ESMTjTPjgDsqVn

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks