Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fb4f1f8032...a8.exe

windows7-x64

10

fb4f1f8032...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2aab8d83f5c4c2ca50ab0cf0418c6b2dc6685fd302826d8c999b5f1be7317ba8.zip

  • Size

    743KB

  • Sample

    250325-r9gbba1nw7

  • MD5

    8934ad71581f5c697830f22fb6de057d

  • SHA1

    c82973dcbdc0e56d7ea32c10a218cf6b1c6989fa

  • SHA256

    2aab8d83f5c4c2ca50ab0cf0418c6b2dc6685fd302826d8c999b5f1be7317ba8

  • SHA512

    a9cc931c96d36dee779d511dac87e2b3ecb637acb73e2804e9bbd1814397c8d82602379f481f96b0fd7893168ebba754ee32792cbf9e64b91c2a1fbdf0fbc937

  • SSDEEP

    12288:7jrpWUDiLF06TZ0Mt2eynqVsSA8H1ogNA4ZaJg2GONsLUJmxSmjCxYL0n0nH/6lb:7sU6FlLt2eynqVNA4ogNtZeLKWPN0ilj

Score
10/10
socelarsdiscoveryspywarestealer

Malware Config

Extracted

Family

socelars

C2

http://www.iyiqian.com/

http://www.xxhufdc.top/

http://www.uefhkice.xyz/

http://www.wygexde.xyz/

Targets

    • Target

      fb4f1f80320365984cc24d8b8afe59f21ada1d07ae9862efb407a3c650bd40a8.exe

    • Size

      1.4MB

    • MD5

      09b950f451b5ea82a536f2b9792f8bf8

    • SHA1

      0e9261eaddfb7dd7a7bc087566dc5fa7a8194bce

    • SHA256

      fb4f1f80320365984cc24d8b8afe59f21ada1d07ae9862efb407a3c650bd40a8

    • SHA512

      669e9655d32a42a9e6dbc0fe917807bb2bca26214079fe5e29e393f99b5e43f3e2bfd7651d02808d7a6571b34bd817dd094b276aa26f08a72a5c79c98587382c

    • SSDEEP

      24576:Hh93Gpb7GggFpiCsNm/xIReKdyIiJxplFRyxaNI9chelnaecXTC6K/8e9mV:D3GpzgDiC/iR5dWXzR1NIGklnanX+6+y

    Score
    10/10
    socelarsdiscoveryspywarestealer

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

      stealersocelars

    • Socelars family

      socelars

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up geolocation information via web service

      Uses a legitimate geolocation service to find the infected system's geolocation info.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks