socgholish | adb6da580c565be402fc787884935063b8d6a75e4411b0dcb2eda3c3d11f1b6f | Triage

Sharing

General

Target

d49b9ba66e84d866f2cbcffc012cc624_JaffaCakes118
Size

202KB
Sample

240908-r827dsvala
MD5

d49b9ba66e84d866f2cbcffc012cc624
SHA1

90e36fde0c8d718a4a03b42798712102e7bca913
SHA256

adb6da580c565be402fc787884935063b8d6a75e4411b0dcb2eda3c3d11f1b6f
SHA512

3b87e8653a5baedee3b3ea5b0de7ba54262cb889f2355ef5a6efe38919f2cfe684684ce49b2f7be34f22a76163fd222ad7b05209a736a913bb33b7338cbdc0f1
SSDEEP

3072:hKQ4SPZD3UcjvG8rM2hFcXmNRSFlFt+OqJK1/O0PxhBjtTLCFY0ZRxiYHzxVGze:nJwXmNRK320hu

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  d49b9ba66e84d866f2cbcffc012cc624_JaffaCakes118
- Size
  
  202KB
- MD5
  
  d49b9ba66e84d866f2cbcffc012cc624
- SHA1
  
  90e36fde0c8d718a4a03b42798712102e7bca913
- SHA256
  
  adb6da580c565be402fc787884935063b8d6a75e4411b0dcb2eda3c3d11f1b6f
- SHA512
  
  3b87e8653a5baedee3b3ea5b0de7ba54262cb889f2355ef5a6efe38919f2cfe684684ce49b2f7be34f22a76163fd222ad7b05209a736a913bb33b7338cbdc0f1
- SSDEEP
  
  3072:hKQ4SPZD3UcjvG8rM2hFcXmNRSFlFt+OqJK1/O0PxhBjtTLCFY0ZRxiYHzxVGze:nJwXmNRK320hu
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2