socgholish | 99aad602e4f87a16304bafba3d936679b2cab03e01296f21b8aef3c1811297f4 | Triage

Sharing

General

Target

438e3ccb9dd9404162901824130b8572_JaffaCakes118
Size

199KB
Sample

241014-wxthbsyglf
MD5

438e3ccb9dd9404162901824130b8572
SHA1

3e72474796535513bf876dfa72bc09f2b66f3c2d
SHA256

99aad602e4f87a16304bafba3d936679b2cab03e01296f21b8aef3c1811297f4
SHA512

262702482ca2af03a2aae425ea4422becbd0f47f637057460301858d37a16650f03384a7d820777f2947b8cdb41c4d6bf69cdee6cf407b1e7785299933c1f74d
SSDEEP

3072:LdtqlgjUa9sB/nCXAOw+R67S8LR3fwa1hWuykxlP7eLQv:aAUamB/nCfgv

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  438e3ccb9dd9404162901824130b8572_JaffaCakes118
- Size
  
  199KB
- MD5
  
  438e3ccb9dd9404162901824130b8572
- SHA1
  
  3e72474796535513bf876dfa72bc09f2b66f3c2d
- SHA256
  
  99aad602e4f87a16304bafba3d936679b2cab03e01296f21b8aef3c1811297f4
- SHA512
  
  262702482ca2af03a2aae425ea4422becbd0f47f637057460301858d37a16650f03384a7d820777f2947b8cdb41c4d6bf69cdee6cf407b1e7785299933c1f74d
- SSDEEP
  
  3072:LdtqlgjUa9sB/nCXAOw+R67S8LR3fwa1hWuykxlP7eLQv:aAUamB/nCfgv
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2