Extracted

• • Target

    ffdc29b48cf5cd228193a668583fe8b3_JaffaCakes118

  • Size

    1.4MB

  • MD5

    ffdc29b48cf5cd228193a668583fe8b3

  • SHA1

    3e3ef5e4a4cecb91ebab9c975464b4cab7ce06fe

  • SHA256

    9389d1894d58d015aa930217beecefffc4fb10f7e277598701c09cc870f0a074

  • SHA512

    5504fd5502c92b6bd82e60ad3ba4c7d84749ad2c31e1a240305e0223004487c55ad5dfb3b9c6e00fbd92cbec8b24b47aedbf16968f516981df11dd112dd1938b

  • SSDEEP

    24576:mTj7ope1XnPzDuPxy3nyjmaRNKMZ8HhrFCKezRD+iFJSiPIm9DqzZea:+7opuPXuM3nomCNCBhCnhbFJSiL9Dq9N

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2