Overview
overview
7Static
static
10-feb-soc...f-3.js
windows7_x64
110-feb-soc...f-3.js
windows10-2004_x64
110-feb-soc...f-3.js
windows7_x64
110-feb-soc...f-3.js
windows10-2004_x64
110-feb-soc...f-3.js
windows7_x64
110-feb-soc...f-3.js
windows10-2004_x64
110-feb-soc...ial.js
windows7_x64
110-feb-soc...ial.js
windows10-2004_x64
110-feb-soc...fox.js
windows7_x64
710-feb-soc...fox.js
windows10-2004_x64
110-feb-soc...st.exe
windows7_x64
110-feb-soc...st.exe
windows10-2004_x64
1General
-
Target
10-feb-socgholish-malware-sample.zip
-
Size
89KB
-
Sample
220526-v28blshdem
-
MD5
f064e3c03e4d31b964340db59a2d56fd
-
SHA1
c28471389e238b24bc665da6bbbd92a73857f00d
-
SHA256
3f03475368e80cacae50fca9e90bbf9defcc76989d78c3b1342f21ccca0658ce
-
SHA512
f6e31d5e91a37abee18bc65e2b788d5187c0093112423d5d5fd2e49704db71464bb976e034ca826c3fa56a34316693bc9c50875ece047b402059d0cbcb3b77d6
Static task
static1
Behavioral task
behavioral1
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-1-of-3.js
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-1-of-3.js
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-2-of-3.js
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-2-of-3.js
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-3-of-3.js
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-3-of-3.js
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
10-feb-socgholish-malware-sample/2020-02-04-trace.mukandratourandtravels.com-initial.js
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
10-feb-socgholish-malware-sample/2020-02-04-trace.mukandratourandtravels.com-initial.js
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
10-feb-socgholish-malware-sample/Firefox.js
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
10-feb-socgholish-malware-sample/Firefox.js
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
10-feb-socgholish-malware-sample/presentationhost.exe
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
10-feb-socgholish-malware-sample/presentationhost.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-1-of-3.txt
-
Size
3KB
-
MD5
c5b3af851ee386541dfe5bc7f1441980
-
SHA1
aa6c2da74a0e70f41d7788465db53106aad5030b
-
SHA256
ac84766b5df6ba052f50dbdf68b8509bf7d2daaea8ac38572cba79d6ee712096
-
SHA512
22482279d4983ce2436cd05f1f240fc8f8d28e117df29a24f05689b3d66566c38f5eec61b04ed8a08c4b87a72a2c82ea85bf51314e95c734b63f300600709e89
Score1/10 -
-
-
Target
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-2-of-3.txt
-
Size
4KB
-
MD5
b93ff54cf035b539b352bfe7059f8ab9
-
SHA1
5446a0b021cc8410f5f0142ea3f5170385b02d72
-
SHA256
e64ac384bfdd99c26849639e4861463eaa24ebd8b4021dcbe65d2f6d06fb8399
-
SHA512
66f4dbccd9581b570290f024b01b7d587511399396d486824696ce7c50d3b98cde350bcb0dd37e7ef10cd394cda4555e1fa06aa72cd350db367b0fcc187484de
Score1/10 -
-
-
Target
10-feb-socgholish-malware-sample/2020-02-04-sodality.mandmsolicitors.com-3-of-3.txt
-
Size
3KB
-
MD5
81cbfa7542c3cd694c9dca8493665599
-
SHA1
16a84fc919dd0697af4c224de588029e040a069a
-
SHA256
8597ab5b3fb371528e5b6b9a619cf8f3da14d93d5a9923c14fdba54a559bb0d0
-
SHA512
89146cb23c75a3fa19aa74b27ae279e711d25fa1f34dd3d4676a9db7d1f694b32a1a2f34b74a077f0808943fc70c353be0096a7d03bad1f2b5351fb84626d530
Score1/10 -
-
-
Target
10-feb-socgholish-malware-sample/2020-02-04-trace.mukandratourandtravels.com-initial.txt
-
Size
46KB
-
MD5
273cd31981c551ae1f211904f038e921
-
SHA1
18844bb38d188c3cf0af7e1be7e842eec34a35cb
-
SHA256
d7dbc334b02ced49463646e44f1c37605c24be4eac2883d41f617a5f911c4055
-
SHA512
aabe3f5d379830ba31893c4999d7d495691200874c21f26b5212cd4612975f738307de6f7b0b6ec128dfd406a56b806828c3038d7650aa93aa029e49a88da778
Score1/10 -
-
-
Target
10-feb-socgholish-malware-sample/Firefox.js
-
Size
88KB
-
MD5
cce2c4534b59acad4bbfbc6d42617dc0
-
SHA1
92905edd16390688e8b02e6e669eb8ac4d8a8d12
-
SHA256
69ea88be502bd00e87aef75e1f41da3e5e0bdb6946d18db5a4a52d919e2dc79b
-
SHA512
16887e9ceaed000b2c551a8aad3522bf68eff327c68c4ec7b80e299e9f9ef923d7f3ecbbc35366461b7060dfc06a5c73955e6273f62aa7e28f4ed173998d9a43
Score7/10-
Deletes itself
-
-
-
Target
10-feb-socgholish-malware-sample/presentationhost.exe
-
Size
103KB
-
MD5
8d9709ff7d9c83bd376e01912c734f0a
-
SHA1
e3c92713ce1d7eaa5e2b1fabeb06cdc0bb499294
-
SHA256
49a568f8ac11173e3a0d76cff6bc1d4b9bdf2c35c6d8570177422f142dcfdbe3
-
SHA512
042ad89ed2e15671f5df67766d11e1fa7ada8241d4513e7c8f0d77b983505d63ebfb39fefa590a2712b77d7024c04445390a8bf4999648f83dbab6b0f04eb2ee
Score1/10 -