General

  • Target

    27d5157bf402388227157ddd0a261c745985230d2549409f629beb87ce97e145

  • Size

    1.5MB

  • Sample

    240302-s2n7maef4x

  • MD5

    ac075db74a9426e1fc71f6a639acd05a

  • SHA1

    b6977b1f25e48c25ad90842d758579998908d760

  • SHA256

    27d5157bf402388227157ddd0a261c745985230d2549409f629beb87ce97e145

  • SHA512

    3848a13efd8b5969ec77bd3806c4343041da6e8ae3a2efe4238478b16fb153b20cb3768d761511bd7ad47d431a29172de55711c4a857ae06c0f7c3b8ed3d8981

  • SSDEEP

    24576:DJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjQx9qBw:Dup62ESMTjTPjQjqe

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/sauydga27/

Targets

    • Target

      27d5157bf402388227157ddd0a261c745985230d2549409f629beb87ce97e145

    • Size

      1.5MB

    • MD5

      ac075db74a9426e1fc71f6a639acd05a

    • SHA1

      b6977b1f25e48c25ad90842d758579998908d760

    • SHA256

      27d5157bf402388227157ddd0a261c745985230d2549409f629beb87ce97e145

    • SHA512

      3848a13efd8b5969ec77bd3806c4343041da6e8ae3a2efe4238478b16fb153b20cb3768d761511bd7ad47d431a29172de55711c4a857ae06c0f7c3b8ed3d8981

    • SSDEEP

      24576:DJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjQx9qBw:Dup62ESMTjTPjQjqe

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks