General

  • Target

    2025-01-19_25c7453c91603b0cb8fd42db144eec1a_avoslocker_luca-stealer

  • Size

    2.0MB

  • Sample

    250119-3c93xazqd1

  • MD5

    25c7453c91603b0cb8fd42db144eec1a

  • SHA1

    ab98bb0e9298a52584151715c7e56b22e3805dfc

  • SHA256

    aac2ec6d7c967a64f915c785c3c95ad4e61ed7e6030fe724c11e02b5ff004a66

  • SHA512

    b83800745668b4b6ce64d5c308702cefdb60cfa8988bc616766f0c1862a06d17938e794195045f17a46cca05046fd4716b123c953491066ba101a68890c66ba5

  • SSDEEP

    49152:Jpny6WxdlwLCnBhqIzu0tqtH7rDmg27RnWGj:G6UPwLCnRltqt3D527BWG

Malware Config

Extracted

Family

socelars

C2

http://www.chosenncrowned.com/

Targets

    • Target

      2025-01-19_25c7453c91603b0cb8fd42db144eec1a_avoslocker_luca-stealer

    • Size

      2.0MB

    • MD5

      25c7453c91603b0cb8fd42db144eec1a

    • SHA1

      ab98bb0e9298a52584151715c7e56b22e3805dfc

    • SHA256

      aac2ec6d7c967a64f915c785c3c95ad4e61ed7e6030fe724c11e02b5ff004a66

    • SHA512

      b83800745668b4b6ce64d5c308702cefdb60cfa8988bc616766f0c1862a06d17938e794195045f17a46cca05046fd4716b123c953491066ba101a68890c66ba5

    • SSDEEP

      49152:Jpny6WxdlwLCnBhqIzu0tqtH7rDmg27RnWGj:G6UPwLCnRltqt3D527BWG

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Socelars family

    • Socelars payload

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up geolocation information via web service

      Uses a legitimate geolocation service to find the infected system's geolocation info.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.