Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4dadde2cc7...4f.exe

windows7-x64

10

4dadde2cc7...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0046f06d419e3a965c3e115a64ec32c78e35004e344798d3f23d8f5248309284.zip

  • Size

    722KB

  • Sample

    250325-cn68aazsg1

  • MD5

    282a74bbeb5432fe3e22870d23f2f7e6

  • SHA1

    0d6edaccb4a6891e8e31745ec8306ffe7d0aac7c

  • SHA256

    0046f06d419e3a965c3e115a64ec32c78e35004e344798d3f23d8f5248309284

  • SHA512

    563d699a251cb7cc351cd75bff9b78c1a0eb098e9599fa83f70fec7c13b50699c85bfa20c2354d2c9d4e2c77fd95a530e202b050c16560d4625be50f04efcf52

  • SSDEEP

    12288:TeI2RFmsO/BBr0l932GN9u6Qi1Jg6e03Zr1efaf7l6RtEgeUu8z9M:TtgFmsO/C9GGN9YAg8DefaDK2

Score
10/10
socelarsdiscoveryspywarestealer

Malware Config

Extracted

Family

socelars

C2

http://www.fddnice.pw/

http://www.sokoinfo.pw/

http://www.zzhlike.pw/

http://www.wygexde.xyz/

Targets

    • Target

      4dadde2cc75cc00a99017299ecfe878299c6c6742ce3abbb198cb440b6b3ce4f.exe

    • Size

      1.4MB

    • MD5

      a26b1a5af7e93bbda77b5f1639815d77

    • SHA1

      38773c74da5bcf9cf59ac849507d5491ac13f838

    • SHA256

      4dadde2cc75cc00a99017299ecfe878299c6c6742ce3abbb198cb440b6b3ce4f

    • SHA512

      68a484b2818dc99be4a32e6bc0fda3f98e9220bea1eb83d935b5a7010d15f6f942e4268117b7d085ee32c590c96bb105051199e0c5e621f449aba34d4ea95d01

    • SSDEEP

      24576:F0tmpAQc251zzwym+vQgDrOVkpmCu+cqlbbu0ywIcbyjpJ76H0T6+rzJ:2tmp151Pw+v1DiVCK+bhyw5wpJ76H0TP

    Score
    10/10
    socelarsdiscoveryspywarestealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Socelars family

      socelars

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks