socgholish | a6ebc61fed6ac14f1240ab8294bd8c090fabcf7f2ec1dfbefef74998b6ab0ec3 | Triage

Sharing

General

Target

3a51c7d03912296b9be996852e7ff53c_JaffaCakes118
Size

265KB
Sample

241012-qyxy9axfrm
MD5

3a51c7d03912296b9be996852e7ff53c
SHA1

02794356e9ccf03c6023b4b81282d88365758794
SHA256

a6ebc61fed6ac14f1240ab8294bd8c090fabcf7f2ec1dfbefef74998b6ab0ec3
SHA512

f0c55cb347942280438fe817bc5d833be311efcab0a464d6c11323916e0f0e1a6ee92e1c3261778573b6e3cc57166ff119111ebc7af3bbc56686be0ff06ed6f6
SSDEEP

3072:guzrxOe3q640qkhkpg70uYqE2fq0A6MrkPuKbN:guzrjT40dXLCe

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  3a51c7d03912296b9be996852e7ff53c_JaffaCakes118
- Size
  
  265KB
- MD5
  
  3a51c7d03912296b9be996852e7ff53c
- SHA1
  
  02794356e9ccf03c6023b4b81282d88365758794
- SHA256
  
  a6ebc61fed6ac14f1240ab8294bd8c090fabcf7f2ec1dfbefef74998b6ab0ec3
- SHA512
  
  f0c55cb347942280438fe817bc5d833be311efcab0a464d6c11323916e0f0e1a6ee92e1c3261778573b6e3cc57166ff119111ebc7af3bbc56686be0ff06ed6f6
- SSDEEP
  
  3072:guzrxOe3q640qkhkpg70uYqE2fq0A6MrkPuKbN:guzrjT40dXLCe
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2