socgholish | 494dc080d97953b0da749a70c744d617eb4481e178240dcf8351fe4b6d4a9d15 | Triage

Sharing

General

Target

d1184b77ddf664cbd9f4e9eff39a716c_JaffaCakes118
Size

186KB
Sample

240907-e9416avfqr
MD5

d1184b77ddf664cbd9f4e9eff39a716c
SHA1

705ca450b7ff8e7410723136e981424a7f59953b
SHA256

494dc080d97953b0da749a70c744d617eb4481e178240dcf8351fe4b6d4a9d15
SHA512

2c604da5674894d2f90d98843fab45be1b8a4c85759d8cef50bd2e9f7857d968f011691e8c160b2a195b46bd3f0a88d6f9548ca5d628f17331d3885eb6425cc1
SSDEEP

3072:TxDNvG8rm/GXmNJUNBVTRQUe+EConLIgVWyHb/th2wpngwDWDRan:rVXmNJWSn

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  d1184b77ddf664cbd9f4e9eff39a716c_JaffaCakes118
- Size
  
  186KB
- MD5
  
  d1184b77ddf664cbd9f4e9eff39a716c
- SHA1
  
  705ca450b7ff8e7410723136e981424a7f59953b
- SHA256
  
  494dc080d97953b0da749a70c744d617eb4481e178240dcf8351fe4b6d4a9d15
- SHA512
  
  2c604da5674894d2f90d98843fab45be1b8a4c85759d8cef50bd2e9f7857d968f011691e8c160b2a195b46bd3f0a88d6f9548ca5d628f17331d3885eb6425cc1
- SSDEEP
  
  3072:TxDNvG8rm/GXmNJUNBVTRQUe+EConLIgVWyHb/th2wpngwDWDRan:rVXmNJWSn
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2