socgholish | 298df980e861635f7623f81a43ffb3ed2432d8dcf00c9a1ecdef0d3772139c5a | Triage

Sharing

General

Target

2ab811bdf9218c36d3299a9efb9c4ff8_JaffaCakes118
Size

101KB
Sample

241009-eymyhazflg
MD5

2ab811bdf9218c36d3299a9efb9c4ff8
SHA1

09fe6f768c782374c19f09c227d2b16ce29d0672
SHA256

298df980e861635f7623f81a43ffb3ed2432d8dcf00c9a1ecdef0d3772139c5a
SHA512

ccfcced9a2e9cb0098ab82bfdf1ac2f50e2779eb3241a9b10b3df7e95ca7495052783269e3f97349a12cc76dee6c4016ae1cca4ecba8ccaaba41d5e19eca6fb0
SSDEEP

1536:f9epBOXIl+qxx6Omw8ieQUR+kQ3pxI0gC7HeM+8m8oHtBOt:f9epBO6x6OmwZpxI0gia8m8oHtBY

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  2ab811bdf9218c36d3299a9efb9c4ff8_JaffaCakes118
- Size
  
  101KB
- MD5
  
  2ab811bdf9218c36d3299a9efb9c4ff8
- SHA1
  
  09fe6f768c782374c19f09c227d2b16ce29d0672
- SHA256
  
  298df980e861635f7623f81a43ffb3ed2432d8dcf00c9a1ecdef0d3772139c5a
- SHA512
  
  ccfcced9a2e9cb0098ab82bfdf1ac2f50e2779eb3241a9b10b3df7e95ca7495052783269e3f97349a12cc76dee6c4016ae1cca4ecba8ccaaba41d5e19eca6fb0
- SSDEEP
  
  1536:f9epBOXIl+qxx6Omw8ieQUR+kQ3pxI0gC7HeM+8m8oHtBOt:f9epBO6x6OmwZpxI0gia8m8oHtBY
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2