socgholish | bde58205d9afeaecf5fdca40548600dbc3fb0df666efa4eb472d0028d5a26dd9 | Triage

Sharing

General

Target

5a5fbc4d5ef99fb28287e3ab6397948e_JaffaCakes118
Size

73KB
Sample

241019-crst3atbqm
MD5

5a5fbc4d5ef99fb28287e3ab6397948e
SHA1

57a51d674392f40223d225d8995219ef931f24b8
SHA256

bde58205d9afeaecf5fdca40548600dbc3fb0df666efa4eb472d0028d5a26dd9
SHA512

9abbd9de12f4b4756a0d3a210545b0562a7b379d7f50c0b79a0b0ac32999c80136410456f462b58c5c77fc86980c3a64026bb65d1e5c899fc7585b3a4855c796
SSDEEP

1536:fnlWVOZOUkf43jprQOCG6eMXgJ268GFxgxz/jIeILOrEo+Y+ujNT5VsNaZHyb:pOUk439roG6PXgJ268xz/jIeILOrEoZm

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  5a5fbc4d5ef99fb28287e3ab6397948e_JaffaCakes118
- Size
  
  73KB
- MD5
  
  5a5fbc4d5ef99fb28287e3ab6397948e
- SHA1
  
  57a51d674392f40223d225d8995219ef931f24b8
- SHA256
  
  bde58205d9afeaecf5fdca40548600dbc3fb0df666efa4eb472d0028d5a26dd9
- SHA512
  
  9abbd9de12f4b4756a0d3a210545b0562a7b379d7f50c0b79a0b0ac32999c80136410456f462b58c5c77fc86980c3a64026bb65d1e5c899fc7585b3a4855c796
- SSDEEP
  
  1536:fnlWVOZOUkf43jprQOCG6eMXgJ268GFxgxz/jIeILOrEo+Y+ujNT5VsNaZHyb:pOUk439roG6PXgJ268xz/jIeILOrEoZm
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2