socgholish | 9253960a25777859c2ea0c0c43f32d2677b4a4881d6e81aabe1977969e2306c2 | Triage

Sharing

General

Target

13c774a4504bf54ea91f39327d7256a9_JaffaCakes118
Size

187KB
Sample

240504-v63lxsfg57
MD5

13c774a4504bf54ea91f39327d7256a9
SHA1

fe0b32fc09c948de876c50c225c752189659e4b1
SHA256

9253960a25777859c2ea0c0c43f32d2677b4a4881d6e81aabe1977969e2306c2
SHA512

057752d8a85269dfa80fdac5c08cac151a265b874381904b9f92b4a2f14580eab6fc86d528970aa973c04777d14d5d0ab0dd8f30ad11ac26eb17aec3dd6799dd
SSDEEP

3072:bvmCwib+VfvOhZxEsQ5blG231h36RR0bnrwfQdRnB0ilQTks9RtMe1A7Q:bvmCbbnZulG231d/i

Score

10^/10

socgholish downloader

Malware Config

Targets

- Target
  
  13c774a4504bf54ea91f39327d7256a9_JaffaCakes118
- Size
  
  187KB
- MD5
  
  13c774a4504bf54ea91f39327d7256a9
- SHA1
  
  fe0b32fc09c948de876c50c225c752189659e4b1
- SHA256
  
  9253960a25777859c2ea0c0c43f32d2677b4a4881d6e81aabe1977969e2306c2
- SHA512
  
  057752d8a85269dfa80fdac5c08cac151a265b874381904b9f92b4a2f14580eab6fc86d528970aa973c04777d14d5d0ab0dd8f30ad11ac26eb17aec3dd6799dd
- SSDEEP
  
  3072:bvmCwib+VfvOhZxEsQ5blG231h36RR0bnrwfQdRnB0ilQTks9RtMe1A7Q:bvmCbbnZulG231d/i
Score

10^/10

socgholish downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdownloader

behavioral2