socgholish | c4a64bfac856312c09689b4dc8ab594e87e358918b2bddb47682480e9eec348f | Triage

Sharing

General

Target

2c59ef781d740674420e3b8f3474125c_JaffaCakes118
Size

395KB
Sample

241009-g22xya1gkd
MD5

2c59ef781d740674420e3b8f3474125c
SHA1

766659061f807cb8ce665075cf8052a9d095b0af
SHA256

c4a64bfac856312c09689b4dc8ab594e87e358918b2bddb47682480e9eec348f
SHA512

e924cd696679c72651482de839e696615f90a2cf899314cf639f8b283391fd3d0db49b8ecf68eba519f81f26fd2cac18c7e91f40c5489ee42e78fb9f148fe486
SSDEEP

3072:OsW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGGfpTMAYeJPeaGzv3VY7RJvs:2DAXmNR8/AWAYEWTZ

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  2c59ef781d740674420e3b8f3474125c_JaffaCakes118
- Size
  
  395KB
- MD5
  
  2c59ef781d740674420e3b8f3474125c
- SHA1
  
  766659061f807cb8ce665075cf8052a9d095b0af
- SHA256
  
  c4a64bfac856312c09689b4dc8ab594e87e358918b2bddb47682480e9eec348f
- SHA512
  
  e924cd696679c72651482de839e696615f90a2cf899314cf639f8b283391fd3d0db49b8ecf68eba519f81f26fd2cac18c7e91f40c5489ee42e78fb9f148fe486
- SSDEEP
  
  3072:OsW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGGfpTMAYeJPeaGzv3VY7RJvs:2DAXmNR8/AWAYEWTZ
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2