socelars | 92c1617d281a547fb7dc3e086f27d268d6cb09d1477ea5087e39eb164d451d62 | Triage

Submit
Reports

Overview

overview

Static

static

9ef9e29a93...18.exe

windows7-x64

9ef9e29a93...18.exe

windows10-2004-x64

Sharing

General

Target

9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118
Size

455KB
Sample

240611-vzzaxsvcne
MD5

9ef9e29a93154b3c7c87191972f20f44
SHA1

21e9361f341c552baaba6fea8e9a63e87a591148
SHA256

92c1617d281a547fb7dc3e086f27d268d6cb09d1477ea5087e39eb164d451d62
SHA512

93cf0776ea78abc5c864e317016cef84b12558adb6bcca174ec8081d507db7fc0e7dddfae4e618811c0158bdbe70d805afd6a0cf5fee834fd27cdb8dc86b1a4b
SSDEEP

12288:pTOnjV+iILZRqTPljGeZNb19En63N9020WK4AvrXYZ:y0DQjZ0YKY

Score

10^/10

socelars discovery stealer upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118.exe

Resource

win7-20240508-en

socelars discovery stealer upx

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118.exe

Resource

win10v2004-20240426-en

socelars stealer upx

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

socelars

C2

http://www.frivoloument.com/index.php/

Targets

- Target
  
  9ef9e29a93154b3c7c87191972f20f44_JaffaCakes118
- Size
  
  455KB
- MD5
  
  9ef9e29a93154b3c7c87191972f20f44
- SHA1
  
  21e9361f341c552baaba6fea8e9a63e87a591148
- SHA256
  
  92c1617d281a547fb7dc3e086f27d268d6cb09d1477ea5087e39eb164d451d62
- SHA512
  
  93cf0776ea78abc5c864e317016cef84b12558adb6bcca174ec8081d507db7fc0e7dddfae4e618811c0158bdbe70d805afd6a0cf5fee834fd27cdb8dc86b1a4b
- SSDEEP
  
  12288:pTOnjV+iILZRqTPljGeZNb19En63N9020WK4AvrXYZ:y0DQjZ0YKY
Score

10^/10

socelars discovery stealer upx
- Socelars
  Socelars is an infostealer targeting browser cookies and credit card credentials.
  stealer socelars
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

socelarsdiscoverystealerupx

behavioral2

socelarsstealerupx

© 2018-2024

Terms | Privacy