Extracted

• • Target
    8b28b4cfd5fc4e1ef82f7a96f10bf89c_JaffaCakes118
  • Size 1.5MB
  • SHA256 6585676245e22cca9f08c5a2f4b7b3020dd02e544a9caa57b1df22687a43192f
  • MD5 8b28b4cfd5fc4e1ef82f7a96f10bf89c
  • SHA1 b3508ba8a9e143063f98fc2d0cdb4782fa838e22
  • SHA512 603d2aea823ae99f9e437cad499d91f539c833123dc525e63262662455b1a826e6840d59f64cb006a8c8e7a228848692eda4c056aeb9b6c33ac4a0bda29ee23a
  • SSDEEP 24576:VxpXPaR2J33o3S7P5zuHHOF2CxfehMHsGKzOYCMEMfX4RZ13:/py+VDi8rgHfX4RZJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2