Extracted

• • Target

    7fc8487d2620dee659c08371a5fe08e2_JaffaCakes118

  • Size

    1.4MB

  • MD5

    7fc8487d2620dee659c08371a5fe08e2

  • SHA1

    634f46833870f18504cadbe6d5c0c2ed50c1e2f2

  • SHA256

    7210c506a970ba7a56858c9e3b9d2c82e190f687bb16d33b2a483429efda8efe

  • SHA512

    7875328ae80d28badcff802c0e1718fff1f7c80ac2a3bd36220f1a2d9e6312f43d4c791aafbd7cd7582be394d52c182d657d2a1d021f7f683a3c02b5acd56cd7

  • SSDEEP

    24576:4IVFA1pqtg/TnMbX0lwyh0FVmEByA1swFYyOsdwsuQOSIt21QxYf+6DP:JFA1pvTMbOwa0TmUqMYEOFQOSIsQxYGm

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars family

    socelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2