socgholish | 7fe7d9b71364ae06c0f6e4fab52067dd6c01b445ca9c3c0d5ddc0e5c46371ab5 | Triage

Sharing

General

Target

34ba42a8cbf8aa5bed531c8e59a9c96a_JaffaCakes118
Size

240KB
Sample

241011-peah6swhjq
MD5

34ba42a8cbf8aa5bed531c8e59a9c96a
SHA1

6425e31ec445c217542eb9e814d7fa8780a79d07
SHA256

7fe7d9b71364ae06c0f6e4fab52067dd6c01b445ca9c3c0d5ddc0e5c46371ab5
SHA512

204ca83287b854cbd02eff9d45619ab2d1eede7e15825c1c0978dddbf74bd0873c3acd24e5ca8f76469b064e3c3dcf28f7ed2d20e3ad9a60befbdf4679c9d5a3
SSDEEP

3072:A3+HWRZCPBth5rOfhts5exlIWY7RkTPSHSe1yd5:ZHWMtUCykc

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  34ba42a8cbf8aa5bed531c8e59a9c96a_JaffaCakes118
- Size
  
  240KB
- MD5
  
  34ba42a8cbf8aa5bed531c8e59a9c96a
- SHA1
  
  6425e31ec445c217542eb9e814d7fa8780a79d07
- SHA256
  
  7fe7d9b71364ae06c0f6e4fab52067dd6c01b445ca9c3c0d5ddc0e5c46371ab5
- SHA512
  
  204ca83287b854cbd02eff9d45619ab2d1eede7e15825c1c0978dddbf74bd0873c3acd24e5ca8f76469b064e3c3dcf28f7ed2d20e3ad9a60befbdf4679c9d5a3
- SSDEEP
  
  3072:A3+HWRZCPBth5rOfhts5exlIWY7RkTPSHSe1yd5:ZHWMtUCykc
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2