socgholish | 6597263d54da83161f818bcd4447fdc3002b84482fdfedcf9575e168c8747639 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

306f56741e5070fb5312c6bdc9b4b133
Size

179KB
Sample

231225-vwnd9aehe7
MD5

306f56741e5070fb5312c6bdc9b4b133
SHA1

2d9f5bef4a46bd40a8bf6c7b7b5802cf05d806aa
SHA256

6597263d54da83161f818bcd4447fdc3002b84482fdfedcf9575e168c8747639
SHA512

fdaeff24020893e90084bddd7fea17ea95cf94cc87cb09ab8e88c8d588213412fcce922c29e6ba7e7521b9cf31271d028d3b3c848caa291d6c08fd35d3ec4864
SSDEEP

3072:rxDNvG8rm/GXmNJUNBVTHQUe+EdE7s6LIBHgcbbb/tY2FQngw1m8R+:jVXmNJ2O1z

Score

10^/10

socgholish downloader

Malware Config

Targets

- Target
  
  306f56741e5070fb5312c6bdc9b4b133
- Size
  
  179KB
- MD5
  
  306f56741e5070fb5312c6bdc9b4b133
- SHA1
  
  2d9f5bef4a46bd40a8bf6c7b7b5802cf05d806aa
- SHA256
  
  6597263d54da83161f818bcd4447fdc3002b84482fdfedcf9575e168c8747639
- SHA512
  
  fdaeff24020893e90084bddd7fea17ea95cf94cc87cb09ab8e88c8d588213412fcce922c29e6ba7e7521b9cf31271d028d3b3c848caa291d6c08fd35d3ec4864
- SSDEEP
  
  3072:rxDNvG8rm/GXmNJUNBVTHQUe+EdE7s6LIBHgcbbb/tY2FQngw1m8R+:jVXmNJ2O1z
Score

10^/10

socgholish downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdownloader

behavioral2