Extracted

• • Target

    88d9141e63c5e2d05294b43d85ffc2604c3eda3b2cac69149743e3990b547212.exe

  • Size

    1.4MB

  • MD5

    87b6aa9999f339367e81cece5164cc61

  • SHA1

    0f0cc9bae58961ceec44d77c09f7670b6e6dcd32

  • SHA256

    88d9141e63c5e2d05294b43d85ffc2604c3eda3b2cac69149743e3990b547212

  • SHA512

    f776a2f99d1446d010afa38a41d8401064329efa76b95c5f5150e7dc695105a834b286e71df6d349a9164936b4e57def370882e71f076ff1be310580b91b66a9

  • SSDEEP

    24576:3m41pME1MkEW13A0u7lYRH0lKFhruS8YyB/Vze22q6pJr4Dt19pqQUuyt3XW4:W41pM2EG3u7mRUlKINzuvpu39pqNuytW

  Score

  10^/10

  socelarsdiscoveryspywarestealer

  • Socelars

    Socelars is an infostealer targeting browser cookies and credit card credentials.

    stealersocelars

  • Socelars family

    socelars

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Drops Chrome extension

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up geolocation information via web service

    Uses a legitimate geolocation service to find the infected system's geolocation info.

  behavioral1behavioral2