socgholish | d986d3dbb8ff3886c48847ea6c76812471df86868ede2993375103389d0f7123 | Triage

Sharing

General

Target

4d7f860c2821a62347af7914f680d3e3_JaffaCakes118
Size

51KB
Sample

241016-sfr2dswbmd
MD5

4d7f860c2821a62347af7914f680d3e3
SHA1

5c3e3d105068453e3d11e1002d8a39ecedb24ba2
SHA256

d986d3dbb8ff3886c48847ea6c76812471df86868ede2993375103389d0f7123
SHA512

1f31bf2e07ff8575a153b1ceac57a7f0f2fbd0faec875a8f64480490891607531ef83f554a52bb4b7df3e85a286ea9ee7882bf973885a14003db4ff40eac51f7
SSDEEP

768:K8wSMxnJVFBNvdop2IDT4BRRTuGZ7OwiVYGw+EakC/729my:QSMvBRZhXika4

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  4d7f860c2821a62347af7914f680d3e3_JaffaCakes118
- Size
  
  51KB
- MD5
  
  4d7f860c2821a62347af7914f680d3e3
- SHA1
  
  5c3e3d105068453e3d11e1002d8a39ecedb24ba2
- SHA256
  
  d986d3dbb8ff3886c48847ea6c76812471df86868ede2993375103389d0f7123
- SHA512
  
  1f31bf2e07ff8575a153b1ceac57a7f0f2fbd0faec875a8f64480490891607531ef83f554a52bb4b7df3e85a286ea9ee7882bf973885a14003db4ff40eac51f7
- SSDEEP
  
  768:K8wSMxnJVFBNvdop2IDT4BRRTuGZ7OwiVYGw+EakC/729my:QSMvBRZhXika4
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2