socgholish | b547ba91fb524aaf5be58209eef23c50582446f23ab8c5be89e94f85f8086680 | Triage

Sharing

General

Target

54ae2df5613cf2c93f7bdb249095251f_JaffaCakes118
Size

136KB
Sample

241018-bnr8pa1aln
MD5

54ae2df5613cf2c93f7bdb249095251f
SHA1

e53f05a8168e26cd4540449c2d27d54a30bed545
SHA256

b547ba91fb524aaf5be58209eef23c50582446f23ab8c5be89e94f85f8086680
SHA512

3e956f83dc22d9f5e21e96e96843eb89348c26838d61afc69acca043cc2739d940f941eea90965c053498dc13696337d838a01b5c53c2b309fc8d177d733a515
SSDEEP

3072:wl8Njz2S81Ep2sqbWsB21TvSVleByTPBXJ27/P7UHeaA2KT1Pu:y8Rh1T0kLq

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  54ae2df5613cf2c93f7bdb249095251f_JaffaCakes118
- Size
  
  136KB
- MD5
  
  54ae2df5613cf2c93f7bdb249095251f
- SHA1
  
  e53f05a8168e26cd4540449c2d27d54a30bed545
- SHA256
  
  b547ba91fb524aaf5be58209eef23c50582446f23ab8c5be89e94f85f8086680
- SHA512
  
  3e956f83dc22d9f5e21e96e96843eb89348c26838d61afc69acca043cc2739d940f941eea90965c053498dc13696337d838a01b5c53c2b309fc8d177d733a515
- SSDEEP
  
  3072:wl8Njz2S81Ep2sqbWsB21TvSVleByTPBXJ27/P7UHeaA2KT1Pu:y8Rh1T0kLq
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2