socgholish | 2878dc1c8084c8cd7143cb86b7d03dfc196ea7b07554871a170ac8e0b130f0d9 | Triage

Sharing

General

Target

2878dc1c8084c8cd7143cb86b7d03dfc196ea7b07554871a170ac8e0b130f0d9N
Size

288KB
Sample

241008-22atnswemr
MD5

19506fd670492f1616b37e763df17c30
SHA1

0d148be5eb58937f9bbd032f601b1422bf46dd9a
SHA256

2878dc1c8084c8cd7143cb86b7d03dfc196ea7b07554871a170ac8e0b130f0d9
SHA512

061ad1e4def29b1f01ca6645d725405b98cc1edc8dda9e1b64d2e050132ccb0175c1f8e7b206e1069a955dc491933142fec703f5dc23e58c636be24ba79f97c6
SSDEEP

3072:unuukRWzt8aN1mfF1scjX/voI31yqQMKhysgoDe+qsyjhILMlWRIM7kx5l2YdaDh:ucot8aN1m76eN3FUrjf

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  2878dc1c8084c8cd7143cb86b7d03dfc196ea7b07554871a170ac8e0b130f0d9N
- Size
  
  288KB
- MD5
  
  19506fd670492f1616b37e763df17c30
- SHA1
  
  0d148be5eb58937f9bbd032f601b1422bf46dd9a
- SHA256
  
  2878dc1c8084c8cd7143cb86b7d03dfc196ea7b07554871a170ac8e0b130f0d9
- SHA512
  
  061ad1e4def29b1f01ca6645d725405b98cc1edc8dda9e1b64d2e050132ccb0175c1f8e7b206e1069a955dc491933142fec703f5dc23e58c636be24ba79f97c6
- SSDEEP
  
  3072:unuukRWzt8aN1mfF1scjX/voI31yqQMKhysgoDe+qsyjhILMlWRIM7kx5l2YdaDh:ucot8aN1m76eN3FUrjf
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2