socgholish | 325448b191455560602f33f0c90856150e3130adb63dd9387bcdebe5fa5d8e2e | Triage

Sharing

General

Target

24f9c844090c1472b0af84c59b5d47ea_JaffaCakes118
Size

187KB
Sample

240508-qc3mlsgd76
MD5

24f9c844090c1472b0af84c59b5d47ea
SHA1

11053259ff61f2762710d68f93c1db45687e06ed
SHA256

325448b191455560602f33f0c90856150e3130adb63dd9387bcdebe5fa5d8e2e
SHA512

612c13309738bc3246769b06444f87a1b59c46bb64ca1bd0cf1b7dbba0406ff0ff99c149da982d8ad55430935c59b5863c54ae8d234002cce640efa6c45f334c
SSDEEP

3072:RxDNvG8rm/GXmNJUNBVTRQUe+E3bwF3nLIgTWyHb/th2wBngwDBsRPm:tVXmNJfbwKtm

Score

10^/10

socgholish downloader

Malware Config

Targets

- Target
  
  24f9c844090c1472b0af84c59b5d47ea_JaffaCakes118
- Size
  
  187KB
- MD5
  
  24f9c844090c1472b0af84c59b5d47ea
- SHA1
  
  11053259ff61f2762710d68f93c1db45687e06ed
- SHA256
  
  325448b191455560602f33f0c90856150e3130adb63dd9387bcdebe5fa5d8e2e
- SHA512
  
  612c13309738bc3246769b06444f87a1b59c46bb64ca1bd0cf1b7dbba0406ff0ff99c149da982d8ad55430935c59b5863c54ae8d234002cce640efa6c45f334c
- SSDEEP
  
  3072:RxDNvG8rm/GXmNJUNBVTRQUe+E3bwF3nLIgTWyHb/th2wBngwDBsRPm:tVXmNJfbwKtm
Score

10^/10

socgholish downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdownloader

behavioral2