General

  • Target

    10-feb-socgholish-malware-sample.zip

  • Size

    89KB

  • Sample

    220526-v28blshdem

  • MD5

    f064e3c03e4d31b964340db59a2d56fd

  • SHA1

    c28471389e238b24bc665da6bbbd92a73857f00d

  • SHA256

    3f03475368e80cacae50fca9e90bbf9defcc76989d78c3b1342f21ccca0658ce

  • SHA512

    f6e31d5e91a37abee18bc65e2b788d5187c0093112423d5d5fd2e49704db71464bb976e034ca826c3fa56a34316693bc9c50875ece047b402059d0cbcb3b77d6

Score
7/10

Malware Config

Targets

    • Target

      10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-1-of-3.txt

    • Size

      3KB

    • MD5

      c5b3af851ee386541dfe5bc7f1441980

    • SHA1

      aa6c2da74a0e70f41d7788465db53106aad5030b

    • SHA256

      ac84766b5df6ba052f50dbdf68b8509bf7d2daaea8ac38572cba79d6ee712096

    • SHA512

      22482279d4983ce2436cd05f1f240fc8f8d28e117df29a24f05689b3d66566c38f5eec61b04ed8a08c4b87a72a2c82ea85bf51314e95c734b63f300600709e89

    Score
    1/10
    • Target

      10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-2-of-3.txt

    • Size

      4KB

    • MD5

      b93ff54cf035b539b352bfe7059f8ab9

    • SHA1

      5446a0b021cc8410f5f0142ea3f5170385b02d72

    • SHA256

      e64ac384bfdd99c26849639e4861463eaa24ebd8b4021dcbe65d2f6d06fb8399

    • SHA512

      66f4dbccd9581b570290f024b01b7d587511399396d486824696ce7c50d3b98cde350bcb0dd37e7ef10cd394cda4555e1fa06aa72cd350db367b0fcc187484de

    Score
    1/10
    • Target

      10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-3-of-3.txt

    • Size

      3KB

    • MD5

      81cbfa7542c3cd694c9dca8493665599

    • SHA1

      16a84fc919dd0697af4c224de588029e040a069a

    • SHA256

      8597ab5b3fb371528e5b6b9a619cf8f3da14d93d5a9923c14fdba54a559bb0d0

    • SHA512

      89146cb23c75a3fa19aa74b27ae279e711d25fa1f34dd3d4676a9db7d1f694b32a1a2f34b74a077f0808943fc70c353be0096a7d03bad1f2b5351fb84626d530

    Score
    1/10
    • Target

      10-feb-socgholish-malware-sample/2020-02-04-trace.mukandratourandtravels.com-initial.txt

    • Size

      46KB

    • MD5

      273cd31981c551ae1f211904f038e921

    • SHA1

      18844bb38d188c3cf0af7e1be7e842eec34a35cb

    • SHA256

      d7dbc334b02ced49463646e44f1c37605c24be4eac2883d41f617a5f911c4055

    • SHA512

      aabe3f5d379830ba31893c4999d7d495691200874c21f26b5212cd4612975f738307de6f7b0b6ec128dfd406a56b806828c3038d7650aa93aa029e49a88da778

    Score
    1/10
    • Target

      10-feb-socgholish-malware-sample/Firefox.js

    • Size

      88KB

    • MD5

      cce2c4534b59acad4bbfbc6d42617dc0

    • SHA1

      92905edd16390688e8b02e6e669eb8ac4d8a8d12

    • SHA256

      69ea88be502bd00e87aef75e1f41da3e5e0bdb6946d18db5a4a52d919e2dc79b

    • SHA512

      16887e9ceaed000b2c551a8aad3522bf68eff327c68c4ec7b80e299e9f9ef923d7f3ecbbc35366461b7060dfc06a5c73955e6273f62aa7e28f4ed173998d9a43

    Score
    7/10
    • Deletes itself

    • Target

      10-feb-socgholish-malware-sample/presentationhost.exe

    • Size

      103KB

    • MD5

      8d9709ff7d9c83bd376e01912c734f0a

    • SHA1

      e3c92713ce1d7eaa5e2b1fabeb06cdc0bb499294

    • SHA256

      49a568f8ac11173e3a0d76cff6bc1d4b9bdf2c35c6d8570177422f142dcfdbe3

    • SHA512

      042ad89ed2e15671f5df67766d11e1fa7ada8241d4513e7c8f0d77b983505d63ebfb39fefa590a2712b77d7024c04445390a8bf4999648f83dbab6b0f04eb2ee

    Score
    1/10

MITRE ATT&CK Matrix

Tasks