socgholish | 9e41f0e5875729fa05f1a45a3fc28ec4f7a5dc001122378140c2ed1634b7311c | Triage

Sharing

General

Target

36262851853df061122614731222e06c_JaffaCakes118
Size

172KB
Sample

241011-wtd88swdkb
MD5

36262851853df061122614731222e06c
SHA1

3f922498690d85150f8ad6ecb58cd8c58474054c
SHA256

9e41f0e5875729fa05f1a45a3fc28ec4f7a5dc001122378140c2ed1634b7311c
SHA512

3ab93b52e01dddebf57886e111a15c7ad1a28b1628dd9f519859c22c56394960834855da4f423c1fb9b76344698f108ab8268aebe74e703098408da744ab447a
SSDEEP

3072:1470gOS+hOunQQdoodchMFn+xjXIPzMEdF+48EnBG1mxq7seV/6mG0sJ80V9o5xc:144gDJunQQj+RMWwIJ6HYrfNwZ8+

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  36262851853df061122614731222e06c_JaffaCakes118
- Size
  
  172KB
- MD5
  
  36262851853df061122614731222e06c
- SHA1
  
  3f922498690d85150f8ad6ecb58cd8c58474054c
- SHA256
  
  9e41f0e5875729fa05f1a45a3fc28ec4f7a5dc001122378140c2ed1634b7311c
- SHA512
  
  3ab93b52e01dddebf57886e111a15c7ad1a28b1628dd9f519859c22c56394960834855da4f423c1fb9b76344698f108ab8268aebe74e703098408da744ab447a
- SSDEEP
  
  3072:1470gOS+hOunQQdoodchMFn+xjXIPzMEdF+48EnBG1mxq7seV/6mG0sJ80V9o5xc:144gDJunQQj+RMWwIJ6HYrfNwZ8+
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2