socgholish | c40164979b26a85270bcb3fea4fb12932cd1b711b707fc214a69ecefe9463433 | Triage

Sharing

General

Target

fe49ac1d8fa0615af1a4bdf6c5ab897e_JaffaCakes118
Size

372KB
Sample

240929-lzrfmssdlb
MD5

fe49ac1d8fa0615af1a4bdf6c5ab897e
SHA1

03c3d6645127f80daba84c14473dbb039fa24a1c
SHA256

c40164979b26a85270bcb3fea4fb12932cd1b711b707fc214a69ecefe9463433
SHA512

084a5d1da447275557672f31f3435d89631c6c23b3bd1ca87ddd344abed3843edd53b566017520119829c138ea4f148862ae0ef902d24dc1201962ff71d6955f
SSDEEP

3072:EHqXEuLjcod5hcod5hB0fPi4pLHdoSpi8Hafzg9tMHO7f:+PfpL9vph6w

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  fe49ac1d8fa0615af1a4bdf6c5ab897e_JaffaCakes118
- Size
  
  372KB
- MD5
  
  fe49ac1d8fa0615af1a4bdf6c5ab897e
- SHA1
  
  03c3d6645127f80daba84c14473dbb039fa24a1c
- SHA256
  
  c40164979b26a85270bcb3fea4fb12932cd1b711b707fc214a69ecefe9463433
- SHA512
  
  084a5d1da447275557672f31f3435d89631c6c23b3bd1ca87ddd344abed3843edd53b566017520119829c138ea4f148862ae0ef902d24dc1201962ff71d6955f
- SSDEEP
  
  3072:EHqXEuLjcod5hcod5hB0fPi4pLHdoSpi8Hafzg9tMHO7f:+PfpL9vph6w
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2