Overview

overview

10

Static

static

10

c40a21adab...1b.exe

windows7-x64

10

c40a21adab...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_458e232328362e7cb5fce70151644b39a675a35af1a87e96b3ac393faac964bf

  • Size

    740KB

  • Sample

    241222-zrmpdayrdl

  • MD5

    ae31dd5f41b72a092731bd598843fe6b

  • SHA1

    6442f6ef10879a051764f75184ae73ccb1819ae6

  • SHA256

    458e232328362e7cb5fce70151644b39a675a35af1a87e96b3ac393faac964bf

  • SHA512

    8e89091a2912f8d1a3827dc414ffacf57e3c0c268367170c0c0ced8a9bf2b321b27a3c12541725fe0b8aa66dbd186c90c142d4da5c445451dce55c8d6bb7e199

  • SSDEEP

    12288:xU0oUEzstu/aYEE/aTbtLwQgxPLvO1pwWxZYmuoGZu60o1bsJV0f2IT953ER+dEW:IUPOatBTN8xTC9Ydhr/Hdt

Score
10/10
socelarsdiscoveryspywarestealer

Malware Config

Extracted

Family

socelars

C2

https://hueduy.s3.eu-west-1.amazonaws.com/nbsdg818/

Targets

    • Target

      c40a21adab3a63277e8a70c92357979bb770ec4c18dd223dd70fe81bd134531b

    • Size

      1.4MB

    • MD5

      12e347e158f019389307ddb157078a5c

    • SHA1

      7a5d5f03f4c50ac1faca4fbd10c9a28ca92b6ab7

    • SHA256

      c40a21adab3a63277e8a70c92357979bb770ec4c18dd223dd70fe81bd134531b

    • SHA512

      5c3a0c034675420a9942cf248839d570aff3cec8be34aa0e61d35665d77bd8f83b84479d6418499b69404ec067605245ed60e7c266ca1be75cce40107ede4707

    • SSDEEP

      24576:qsLp0FasdJu/+/dfMs2KLoyaU/5DeTgtMyPtToFQo/NkGd:XpncZO+HCyPtToWoVkGd

    Score
    10/10
    socelarsdiscoveryspywarestealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Socelars family

      socelars

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks