socgholish | b418594770d54b7303d155824e453054f5d80bcdf24404881f4b7bea150b4a68 | Triage

Sharing

General

Target

2b932cbf6bbf8cd99c7c113f1c926008_JaffaCakes118
Size

282KB
Sample

241009-f1fgwawfpc
MD5

2b932cbf6bbf8cd99c7c113f1c926008
SHA1

36199a8415f11b6b94f4caa12542c790d4d7d45d
SHA256

b418594770d54b7303d155824e453054f5d80bcdf24404881f4b7bea150b4a68
SHA512

40344a653500c33b6495746896a260851b0b346fb78def6480c1da0fb38cf38d1f3ed09a486c92cabbf02eaeb5036466504974f146e41ac4ff9ea70bc99608f5
SSDEEP

3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgU73VY7RJvfy3d3ABa:CDAXmNR8/Vn

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  2b932cbf6bbf8cd99c7c113f1c926008_JaffaCakes118
- Size
  
  282KB
- MD5
  
  2b932cbf6bbf8cd99c7c113f1c926008
- SHA1
  
  36199a8415f11b6b94f4caa12542c790d4d7d45d
- SHA256
  
  b418594770d54b7303d155824e453054f5d80bcdf24404881f4b7bea150b4a68
- SHA512
  
  40344a653500c33b6495746896a260851b0b346fb78def6480c1da0fb38cf38d1f3ed09a486c92cabbf02eaeb5036466504974f146e41ac4ff9ea70bc99608f5
- SSDEEP
  
  3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgU73VY7RJvfy3d3ABa:CDAXmNR8/Vn
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2