socgholish | 2459eb6bfb96d00dccb0da6645f17df046d177c3c9fdf686afcd354d5b50691c | Triage

Sharing

General

Target

3f36b2ccd190bccb0c87dbd8b03fa563_JaffaCakes118
Size

78KB
Sample

241013-l21gbs1ape
MD5

3f36b2ccd190bccb0c87dbd8b03fa563
SHA1

994216ccaa3b27260fe0c506fa0d83084d0ebd5f
SHA256

2459eb6bfb96d00dccb0da6645f17df046d177c3c9fdf686afcd354d5b50691c
SHA512

ba236ec01c8f25931e17b1ec98fea4f95b370af31b3f3c04ff45b87c110892874d98c1d023f4c3223476c696e64b3c200bd3e63041968ed729ed3c1249627cc6
SSDEEP

1536:+6+HH2YqMkqIjNBeekIvkGIykkqIveekIvkGIykkqINee4IvkGIYzIvkGIYAjdBU:+1HWrdNeIpmvqb71NBwKJ5A

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  3f36b2ccd190bccb0c87dbd8b03fa563_JaffaCakes118
- Size
  
  78KB
- MD5
  
  3f36b2ccd190bccb0c87dbd8b03fa563
- SHA1
  
  994216ccaa3b27260fe0c506fa0d83084d0ebd5f
- SHA256
  
  2459eb6bfb96d00dccb0da6645f17df046d177c3c9fdf686afcd354d5b50691c
- SHA512
  
  ba236ec01c8f25931e17b1ec98fea4f95b370af31b3f3c04ff45b87c110892874d98c1d023f4c3223476c696e64b3c200bd3e63041968ed729ed3c1249627cc6
- SSDEEP
  
  1536:+6+HH2YqMkqIjNBeekIvkGIykkqIveekIvkGIykkqINee4IvkGIYzIvkGIYAjdBU:+1HWrdNeIpmvqb71NBwKJ5A
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2