socgholish | 7d67967b0589e3f7e058fc197ef9d0871939e7694a173cc18bf78a0696a4968b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d162ee649559a90f63c827a6617b2190_JaffaCakes118
Size

242KB
Sample

240907-h8391ssalj
MD5

d162ee649559a90f63c827a6617b2190
SHA1

bf15ff1bdca88e6a42006cc3f9a8fe0b5952eeab
SHA256

7d67967b0589e3f7e058fc197ef9d0871939e7694a173cc18bf78a0696a4968b
SHA512

c4c7f8e5f8b11e36ffb20b4b2792632234a0cafbeb1478f81e008ca65452cd597bca1ba436ec2a73d5216dbb49ea7debe181c596f5e956b53b3614d5837166d5
SSDEEP

3072:vW1HWLuTxmcVxIljwu+1SCe0ZSX0hqF62h11t:yHWHeVe0ZSX0he

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  d162ee649559a90f63c827a6617b2190_JaffaCakes118
- Size
  
  242KB
- MD5
  
  d162ee649559a90f63c827a6617b2190
- SHA1
  
  bf15ff1bdca88e6a42006cc3f9a8fe0b5952eeab
- SHA256
  
  7d67967b0589e3f7e058fc197ef9d0871939e7694a173cc18bf78a0696a4968b
- SHA512
  
  c4c7f8e5f8b11e36ffb20b4b2792632234a0cafbeb1478f81e008ca65452cd597bca1ba436ec2a73d5216dbb49ea7debe181c596f5e956b53b3614d5837166d5
- SSDEEP
  
  3072:vW1HWLuTxmcVxIljwu+1SCe0ZSX0hqF62h11t:yHWHeVe0ZSX0he
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2