Extracted

• • Target

    5e2811a1d2df600a913d82630286f395_JaffaCakes118

  • Size

    1.4MB

  • MD5

    5e2811a1d2df600a913d82630286f395

  • SHA1

    42114ac635c4e8e96dff26ce5a2eb7c5a51a1551

  • SHA256

    61c43e1819dd670f4c589aac171c43ff2af07a0fc07414b1af306472049152da

  • SHA512

    568b015c2c56a92d8aef1ec92f29ca85e568f2eb1f18fc68e64ff3e0c5887a689d89dba270439a2c8fa83bae8fb8c8e89ee0a792c9c7ed16ee34823602feb63a

  • SSDEEP

    24576:axpXPaR2J33o3S7P5zuHHOF2CxfehMHsGKzOYCMEMfX4IZ10zjP8CAq:apy+VDi8rgHfX4IZGzjP8CAq

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  • Drops file in System32 directory

  behavioral1behavioral2