socgholish | bb87ba2daa080edf4f15f6b0ca2e037d74ee2d688c97953df33a7d5dcb19f535 | Triage

Sharing

General

Target

4060f455863912e452b1d90ae4d7c2a2_JaffaCakes118
Size

312KB
Sample

241013-rv76gswcmr
MD5

4060f455863912e452b1d90ae4d7c2a2
SHA1

bf73c9fb665c6cf5f019753d839d3eb56b9d4fef
SHA256

bb87ba2daa080edf4f15f6b0ca2e037d74ee2d688c97953df33a7d5dcb19f535
SHA512

effbc11b304599b32669e08a6e3ae63ac10383629512288d54e21a14c1b03a0925d2832eb0a676e15029f0b198e9415928f2259ac627ead10fa1ffaaff454bfa
SSDEEP

3072:OcW6WCiqYxDNvG8rmgcXmNRSzl+Ler71BMn3/12mG4QsRzsx+TIt3VY7RJvfy3dR:kDAXmNR7QD7

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  4060f455863912e452b1d90ae4d7c2a2_JaffaCakes118
- Size
  
  312KB
- MD5
  
  4060f455863912e452b1d90ae4d7c2a2
- SHA1
  
  bf73c9fb665c6cf5f019753d839d3eb56b9d4fef
- SHA256
  
  bb87ba2daa080edf4f15f6b0ca2e037d74ee2d688c97953df33a7d5dcb19f535
- SHA512
  
  effbc11b304599b32669e08a6e3ae63ac10383629512288d54e21a14c1b03a0925d2832eb0a676e15029f0b198e9415928f2259ac627ead10fa1ffaaff454bfa
- SSDEEP
  
  3072:OcW6WCiqYxDNvG8rmgcXmNRSzl+Ler71BMn3/12mG4QsRzsx+TIt3VY7RJvfy3dR:kDAXmNR7QD7
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2