General

  • Target

    9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118

  • Size

    455KB

  • Sample

    240611-vzzaxsvcne

  • MD5

    9ef9e29a93154b3c7c87191972f20f44

  • SHA1

    21e9361f341c552baaba6fea8e9a63e87a591148

  • SHA256

    92c1617d281a547fb7dc3e086f27d268d6cb09d1477ea5087e39eb164d451d62

  • SHA512

    93cf0776ea78abc5c864e317016cef84b12558adb6bcca174ec8081d507db7fc0e7dddfae4e618811c0158bdbe70d805afd6a0cf5fee834fd27cdb8dc86b1a4b

  • SSDEEP

    12288:pTOnjV+iILZRqTPljGeZNb19En63N9020WK4AvrXYZ:y0DQjZ0YKY

Malware Config

Extracted

Family

socelars

C2

http://www.frivoloument.com/index.php/

Targets

    • Target

      9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118

    • Size

      455KB

    • MD5

      9ef9e29a93154b3c7c87191972f20f44

    • SHA1

      21e9361f341c552baaba6fea8e9a63e87a591148

    • SHA256

      92c1617d281a547fb7dc3e086f27d268d6cb09d1477ea5087e39eb164d451d62

    • SHA512

      93cf0776ea78abc5c864e317016cef84b12558adb6bcca174ec8081d507db7fc0e7dddfae4e618811c0158bdbe70d805afd6a0cf5fee834fd27cdb8dc86b1a4b

    • SSDEEP

      12288:pTOnjV+iILZRqTPljGeZNb19En63N9020WK4AvrXYZ:y0DQjZ0YKY

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks