socgholish | 4eb6f39a8569759eb58e2b34129efa0641739ec2d476f8bf678d40291279b476 | Triage

Sharing

General

Target

bddc5f04aad68310e04f3e32122ed8ff_JaffaCakes118
Size

44KB
Sample

240824-eqam7stgpl
MD5

bddc5f04aad68310e04f3e32122ed8ff
SHA1

cb7bf95fbe4082262a6e7af261c5220dbdf6e02d
SHA256

4eb6f39a8569759eb58e2b34129efa0641739ec2d476f8bf678d40291279b476
SHA512

ea32037b23b5f3d028de8ebb2ac1f4d4aec12df414170db82000823e05f8de2c0d05146081c28b595f899d67ff42da22d3a4d78df4762db72626883429c68181
SSDEEP

768:tncOWPOLOpsxHOT61DKpB3gGJ5Sm00sgsy6E5TED/kDat/Hnm/ud886awJwfB8Ov:tnTXKl4KpB3H5SD6Tk/nvSvQBzzQS

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  bddc5f04aad68310e04f3e32122ed8ff_JaffaCakes118
- Size
  
  44KB
- MD5
  
  bddc5f04aad68310e04f3e32122ed8ff
- SHA1
  
  cb7bf95fbe4082262a6e7af261c5220dbdf6e02d
- SHA256
  
  4eb6f39a8569759eb58e2b34129efa0641739ec2d476f8bf678d40291279b476
- SHA512
  
  ea32037b23b5f3d028de8ebb2ac1f4d4aec12df414170db82000823e05f8de2c0d05146081c28b595f899d67ff42da22d3a4d78df4762db72626883429c68181
- SSDEEP
  
  768:tncOWPOLOpsxHOT61DKpB3gGJ5Sm00sgsy6E5TED/kDat/Hnm/ud886awJwfB8Ov:tnTXKl4KpB3H5SD6Tk/nvSvQBzzQS
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2