Extracted

• • Target

    533fa0fc69c4a516d19c15cfb3490732_JaffaCakes118

  • Size

    1.4MB

  • MD5

    533fa0fc69c4a516d19c15cfb3490732

  • SHA1

    795de8ad6c4363c6e21a5df0dc619e6173cd73b1

  • SHA256

    69a72e21fee186b463e8482284f561e68939e0376d1670838b28f092388322d4

  • SHA512

    9af2503285cca92524c9c00ec9e5547dcbd78087cf37e4af48e0e7f328aa3f619637c21b780fcd73a5055ae1a535cdbca04165686780b573c75badad22e7383c

  • SSDEEP

    24576:yIA7opO13nWEjukQuzHVZ64lEq25RHxrFCKezViURT1jS7VQ+IB41Cf6:27op+Weu+zHj64ENRhCHJh1jS7y+IBOT

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2