socgholish | 02b79ecf3fcb5c3487c1d12452e52ecd87b04005516583f4cd00b8bc73bf9053 | Triage

Sharing

General

Target

42ac1d73c0163dd2682f457e1e8a22fe_JaffaCakes118
Size

53KB
Sample

241014-rkpamatbpn
MD5

42ac1d73c0163dd2682f457e1e8a22fe
SHA1

a942f133433f9175a65c18d195ee333a2e4065ca
SHA256

02b79ecf3fcb5c3487c1d12452e52ecd87b04005516583f4cd00b8bc73bf9053
SHA512

32cb0925c3e3e420f8213de28e998db6cde2b85b9f12bdceb2000fa4d92ab0c3dc3ccaee35d480157d8c99302f82bc63a3854862ae6c93ed385ec4c2b711f746
SSDEEP

1536:25c9qJTl62V3Fh8HTG/q9WB0GI8buqdiOmni5QdiUzD5cyOVfsuBiz:25c9qJTl62V3Ykq9WB0GvbuqdiOmniKP

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  42ac1d73c0163dd2682f457e1e8a22fe_JaffaCakes118
- Size
  
  53KB
- MD5
  
  42ac1d73c0163dd2682f457e1e8a22fe
- SHA1
  
  a942f133433f9175a65c18d195ee333a2e4065ca
- SHA256
  
  02b79ecf3fcb5c3487c1d12452e52ecd87b04005516583f4cd00b8bc73bf9053
- SHA512
  
  32cb0925c3e3e420f8213de28e998db6cde2b85b9f12bdceb2000fa4d92ab0c3dc3ccaee35d480157d8c99302f82bc63a3854862ae6c93ed385ec4c2b711f746
- SSDEEP
  
  1536:25c9qJTl62V3Fh8HTG/q9WB0GI8buqdiOmni5QdiUzD5cyOVfsuBiz:25c9qJTl62V3Ykq9WB0GvbuqdiOmniKP
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2