socgholish | a8bb31550619bf8fff480f5449cbaf6857eb21831311b2294ae513f588bb3864 | Triage

Sharing

General

Target

2e359ba56591d8a1a5bd12cd4e7d62e0_JaffaCakes118
Size

198KB
Sample

241009-kshz9a1bqn
MD5

2e359ba56591d8a1a5bd12cd4e7d62e0
SHA1

15f9ad5385dca9ae731768004222025ad6343c85
SHA256

a8bb31550619bf8fff480f5449cbaf6857eb21831311b2294ae513f588bb3864
SHA512

1fb6567926ed904349d0bd1020f73c66c453b4bf27dd9184fdbb95da6c1a0e2650e629bd72f03ce016785d307dac5aa4a9883dea4be58cdf5bc58e72e93b0a0f
SSDEEP

3072:BLNWMurqZ5Qe52J+DVB9pRMdVdjqyNEcSCOurvjt/H5SJVmtASFDBYgKbspJa:BLN51b9pRWffesrB/H5SC/dO

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  2e359ba56591d8a1a5bd12cd4e7d62e0_JaffaCakes118
- Size
  
  198KB
- MD5
  
  2e359ba56591d8a1a5bd12cd4e7d62e0
- SHA1
  
  15f9ad5385dca9ae731768004222025ad6343c85
- SHA256
  
  a8bb31550619bf8fff480f5449cbaf6857eb21831311b2294ae513f588bb3864
- SHA512
  
  1fb6567926ed904349d0bd1020f73c66c453b4bf27dd9184fdbb95da6c1a0e2650e629bd72f03ce016785d307dac5aa4a9883dea4be58cdf5bc58e72e93b0a0f
- SSDEEP
  
  3072:BLNWMurqZ5Qe52J+DVB9pRMdVdjqyNEcSCOurvjt/H5SJVmtASFDBYgKbspJa:BLN51b9pRWffesrB/H5SC/dO
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2