socgholish | 594d77bed843282014b5359f2cf77d31afb9281e5bf338127a2f7ef85e3d3751 | Triage

Sharing

General

Target

474ebb3eb8e8760c5efd5521ba922889_JaffaCakes118
Size

126KB
Sample

241015-ml1mtszbkc
MD5

474ebb3eb8e8760c5efd5521ba922889
SHA1

a3b0c0e58b1458d1d18d3cb8cbb66b2e70850e5f
SHA256

594d77bed843282014b5359f2cf77d31afb9281e5bf338127a2f7ef85e3d3751
SHA512

d3b6e482e86870c6bb7d95d14ee105fe715c2bc8a05810e315d60e8cb72d2e5c5abfb29810ede3f0bc96228fd92d2df4dc9b74704ad9261d7c01392c6e58db60
SSDEEP

3072:pUUCWDxYxQ2PDxYxC2T/Z1syoEZNgyj3ySefhENE/jzCqezqg3RO:pUU1DxYxQ2PDxYxC2T/ZSyTYl

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  474ebb3eb8e8760c5efd5521ba922889_JaffaCakes118
- Size
  
  126KB
- MD5
  
  474ebb3eb8e8760c5efd5521ba922889
- SHA1
  
  a3b0c0e58b1458d1d18d3cb8cbb66b2e70850e5f
- SHA256
  
  594d77bed843282014b5359f2cf77d31afb9281e5bf338127a2f7ef85e3d3751
- SHA512
  
  d3b6e482e86870c6bb7d95d14ee105fe715c2bc8a05810e315d60e8cb72d2e5c5abfb29810ede3f0bc96228fd92d2df4dc9b74704ad9261d7c01392c6e58db60
- SSDEEP
  
  3072:pUUCWDxYxQ2PDxYxC2T/Z1syoEZNgyj3ySefhENE/jzCqezqg3RO:pUU1DxYxQ2PDxYxC2T/ZSyTYl
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2