socgholish | 43eba5a4f5e2d8ea5d0a3da56f67d66a11d815dd9d6ef397353809f66e992b50 | Triage

Sharing

General

Target

5e668db04cfd2ff2d4069ef07b5279bd_JaffaCakes118
Size

120KB
Sample

241019-yqxmhswalf
MD5

5e668db04cfd2ff2d4069ef07b5279bd
SHA1

e62075c81cb5e3fe6abd630b47a412121ccd98c1
SHA256

43eba5a4f5e2d8ea5d0a3da56f67d66a11d815dd9d6ef397353809f66e992b50
SHA512

6770f9e56e8efdc98090c25b2862cd8421b335419c768e4be0dced74fa4d957b2c1148046b9fae2a555451672647cc51fac665bb929344c513e4149172c388a2
SSDEEP

768:D+wW1cR3gvozHvvCI6ocL3y6qTLbTgDtn7aTORVxeYlzV5W435HO/vtYG6/kEw3j:D+B1xYHvF6d3y6qTLbjOR7o8wn6e0tVc

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  5e668db04cfd2ff2d4069ef07b5279bd_JaffaCakes118
- Size
  
  120KB
- MD5
  
  5e668db04cfd2ff2d4069ef07b5279bd
- SHA1
  
  e62075c81cb5e3fe6abd630b47a412121ccd98c1
- SHA256
  
  43eba5a4f5e2d8ea5d0a3da56f67d66a11d815dd9d6ef397353809f66e992b50
- SHA512
  
  6770f9e56e8efdc98090c25b2862cd8421b335419c768e4be0dced74fa4d957b2c1148046b9fae2a555451672647cc51fac665bb929344c513e4149172c388a2
- SSDEEP
  
  768:D+wW1cR3gvozHvvCI6ocL3y6qTLbTgDtn7aTORVxeYlzV5W435HO/vtYG6/kEw3j:D+B1xYHvF6d3y6qTLbjOR7o8wn6e0tVc
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2