socgholish | 6e2d9f0fbe90cbf43b46ee85d6d437f71f85f7c1558fef98cc3b8a5022ce2bdd | Triage

Sharing

General

Target

3b8ad0432eb750fe51d03351a1c2c749_JaffaCakes118
Size

151KB
Sample

241012-xftmfazdpp
MD5

3b8ad0432eb750fe51d03351a1c2c749
SHA1

eaf1c09dc1dab8711c91951d0063b8c1ce519c17
SHA256

6e2d9f0fbe90cbf43b46ee85d6d437f71f85f7c1558fef98cc3b8a5022ce2bdd
SHA512

4ced51f8e3533db1aa7d44ae0a1fee0ad21c67ed2c18fe5555a1511e07c22fcd1363a6301e4bd817202991e44683651735feb48c04e2b76daee6cd6134d9f120
SSDEEP

1536:hmJEEJXFRi/gDevYCjanDD9BVZfkjnJKlf5wrw+iB:hEJXri/cOYCjanfVZfcs

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  3b8ad0432eb750fe51d03351a1c2c749_JaffaCakes118
- Size
  
  151KB
- MD5
  
  3b8ad0432eb750fe51d03351a1c2c749
- SHA1
  
  eaf1c09dc1dab8711c91951d0063b8c1ce519c17
- SHA256
  
  6e2d9f0fbe90cbf43b46ee85d6d437f71f85f7c1558fef98cc3b8a5022ce2bdd
- SHA512
  
  4ced51f8e3533db1aa7d44ae0a1fee0ad21c67ed2c18fe5555a1511e07c22fcd1363a6301e4bd817202991e44683651735feb48c04e2b76daee6cd6134d9f120
- SSDEEP
  
  1536:hmJEEJXFRi/gDevYCjanDD9BVZfkjnJKlf5wrw+iB:hEJXri/cOYCjanfVZfcs
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2