socgholish | f5e65fa623df99308a89dd4bf51fe82d68d03a8dce3cbc5f8c5fd9f5d3fd0db7 | Triage

Sharing

General

Target

27a4b5f8d0ddf64ad12e472e605bbd6e_JaffaCakes118
Size

103KB
Sample

241009-an59waxbna
MD5

27a4b5f8d0ddf64ad12e472e605bbd6e
SHA1

11eac68422624bb17d3c1a3513bbb50b9dd3937c
SHA256

f5e65fa623df99308a89dd4bf51fe82d68d03a8dce3cbc5f8c5fd9f5d3fd0db7
SHA512

3e183fe94999ed23a6db7f4965777239b01b76437e57a740fc0d7e1693a1bffd333ca665a285004b101fc44f01109829da0ece218df3f5e6f7d96ca39fbb4e0c
SSDEEP

3072:6NBeCQNv0ffUcjvG8rMBC8jY59rCX7CeTs43PT0mJQY:6NBeCQNv0ftJwv

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  27a4b5f8d0ddf64ad12e472e605bbd6e_JaffaCakes118
- Size
  
  103KB
- MD5
  
  27a4b5f8d0ddf64ad12e472e605bbd6e
- SHA1
  
  11eac68422624bb17d3c1a3513bbb50b9dd3937c
- SHA256
  
  f5e65fa623df99308a89dd4bf51fe82d68d03a8dce3cbc5f8c5fd9f5d3fd0db7
- SHA512
  
  3e183fe94999ed23a6db7f4965777239b01b76437e57a740fc0d7e1693a1bffd333ca665a285004b101fc44f01109829da0ece218df3f5e6f7d96ca39fbb4e0c
- SSDEEP
  
  3072:6NBeCQNv0ffUcjvG8rMBC8jY59rCX7CeTs43PT0mJQY:6NBeCQNv0ftJwv
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2