Extracted

• • Target

    63bc7825577af0983fe0a0f0660ab267_JaffaCakes118

  • Size

    1.4MB

  • MD5

    63bc7825577af0983fe0a0f0660ab267

  • SHA1

    cd102fee4a94493663280d4601d2d323528f10b1

  • SHA256

    ca0379cddfd3592de6262fd22364332d15358642c3ff3766fd1cd8f2d65171aa

  • SHA512

    f29ffb194a9619cd6d17a764d0bb658f0e07f1095418a941c93b23c6b8b1f0aaaa507466be36156af06bf8ad56a59347a056fcafc142dddeea0e6cfb479ac7a6

  • SSDEEP

    24576:dxpXPaR2J33o3S7P5zuHHOF2ahfehMHsGKzOYf8EEvX3mZ16y8e:npy+VDa8rtPvX3mZAy8e

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2