Extracted

• • Target

    8b28b4cfd5fc4e1ef82f7a96f10bf89c_JaffaCakes118

  • Size

    1.5MB

  • MD5

    8b28b4cfd5fc4e1ef82f7a96f10bf89c

  • SHA1

    b3508ba8a9e143063f98fc2d0cdb4782fa838e22

  • SHA256

    6585676245e22cca9f08c5a2f4b7b3020dd02e544a9caa57b1df22687a43192f

  • SHA512

    603d2aea823ae99f9e437cad499d91f539c833123dc525e63262662455b1a826e6840d59f64cb006a8c8e7a228848692eda4c056aeb9b6c33ac4a0bda29ee23a

  • SSDEEP

    24576:VxpXPaR2J33o3S7P5zuHHOF2CxfehMHsGKzOYCMEMfX4RZ13:/py+VDi8rgHfX4RZJ

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2