socgholish | 30d6887b25d460e9de93589646a1082572b9b9f2276d2d036a04c379e9d8544f | Triage

Sharing

General

Target

5c799051e0f161d26daa429a49d98a50_JaffaCakes118
Size

190KB
Sample

241019-nz5pdavarc
MD5

5c799051e0f161d26daa429a49d98a50
SHA1

903d26a7cebb690a50562573e1989ab762357db7
SHA256

30d6887b25d460e9de93589646a1082572b9b9f2276d2d036a04c379e9d8544f
SHA512

995f4f6185251b372388659cb5069297f1786a4b0b11d9578e540a351e41bf20a6ed6c2f3a9a4c44afb5f57aa370d790bda2f7e82703ca09a75b2f2095ee39be
SSDEEP

3072:/JzFZpRqbXt83vLGhIqmq3SmtXCmtXolKoX47pHkgTqdEyUwylml2:/JddKV7VoZS9

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  5c799051e0f161d26daa429a49d98a50_JaffaCakes118
- Size
  
  190KB
- MD5
  
  5c799051e0f161d26daa429a49d98a50
- SHA1
  
  903d26a7cebb690a50562573e1989ab762357db7
- SHA256
  
  30d6887b25d460e9de93589646a1082572b9b9f2276d2d036a04c379e9d8544f
- SHA512
  
  995f4f6185251b372388659cb5069297f1786a4b0b11d9578e540a351e41bf20a6ed6c2f3a9a4c44afb5f57aa370d790bda2f7e82703ca09a75b2f2095ee39be
- SSDEEP
  
  3072:/JzFZpRqbXt83vLGhIqmq3SmtXCmtXolKoX47pHkgTqdEyUwylml2:/JddKV7VoZS9
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2