socgholish | c49bf00a7caa8d856f4a83ca8d8d989cbda7742d8a0c03e38a021f96b470eeeb | Triage

Sharing

General

Target

209a457ca077b396062d0e0a5e7ea9e4_JaffaCakes118
Size

283KB
Sample

241008-kkja2s1gkf
MD5

209a457ca077b396062d0e0a5e7ea9e4
SHA1

235fcc6db3a107772c5ebb928c583060a9e0d732
SHA256

c49bf00a7caa8d856f4a83ca8d8d989cbda7742d8a0c03e38a021f96b470eeeb
SHA512

04956fc7cd37d0351ef501a2c439362b9c5dcb70201b1839bcffc45a3c336134e7f70572fbd18161c117a009550f1e837a6940ea9378cad60abccb5d2d5480cb
SSDEEP

3072:OZW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgD+3VY7RJvfy3d9tcT:HDAXmNR8/j4

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  209a457ca077b396062d0e0a5e7ea9e4_JaffaCakes118
- Size
  
  283KB
- MD5
  
  209a457ca077b396062d0e0a5e7ea9e4
- SHA1
  
  235fcc6db3a107772c5ebb928c583060a9e0d732
- SHA256
  
  c49bf00a7caa8d856f4a83ca8d8d989cbda7742d8a0c03e38a021f96b470eeeb
- SHA512
  
  04956fc7cd37d0351ef501a2c439362b9c5dcb70201b1839bcffc45a3c336134e7f70572fbd18161c117a009550f1e837a6940ea9378cad60abccb5d2d5480cb
- SSDEEP
  
  3072:OZW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgD+3VY7RJvfy3d9tcT:HDAXmNR8/j4
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2