socgholish | 84cff54733b9aa34a70a03a0f9f26319ff17b90d5785d478830cc1602b4ac506 | Triage

Sharing

General

Target

505276ffbf6de691ddb5e72515540f6b_JaffaCakes118
Size

153KB
Sample

241017-csentsxdlc
MD5

505276ffbf6de691ddb5e72515540f6b
SHA1

8896f88016a827d982ccf23bc75337afa0dd1e45
SHA256

84cff54733b9aa34a70a03a0f9f26319ff17b90d5785d478830cc1602b4ac506
SHA512

6317782d3b71c9c9bdfcd1b7b32f48c222f9156b3db1a61daf1474ab4f0a49f07340fb84d65f611601caa3d9bf922ff0708f0b4715480e3f27dea431cc122524
SSDEEP

3072:GxDnfSnIoEVy8yJlPI0D4DVyEgR/uc4QtC2iL:GxDnfSQboD4DIdiL

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  505276ffbf6de691ddb5e72515540f6b_JaffaCakes118
- Size
  
  153KB
- MD5
  
  505276ffbf6de691ddb5e72515540f6b
- SHA1
  
  8896f88016a827d982ccf23bc75337afa0dd1e45
- SHA256
  
  84cff54733b9aa34a70a03a0f9f26319ff17b90d5785d478830cc1602b4ac506
- SHA512
  
  6317782d3b71c9c9bdfcd1b7b32f48c222f9156b3db1a61daf1474ab4f0a49f07340fb84d65f611601caa3d9bf922ff0708f0b4715480e3f27dea431cc122524
- SSDEEP
  
  3072:GxDnfSnIoEVy8yJlPI0D4DVyEgR/uc4QtC2iL:GxDnfSQboD4DIdiL
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2