socgholish | 1b43c31b317a1cfaf56d1d32650ab776b484b6069de444400517da6935e84e66 | Triage

Sharing

General

Target

61395b8bc4d23a0d78156f9554246a57_JaffaCakes118
Size

99KB
Sample

241020-j5c44azdqk
MD5

61395b8bc4d23a0d78156f9554246a57
SHA1

0524e2ed9a08a0d29ab508b88719a175e3601ad1
SHA256

1b43c31b317a1cfaf56d1d32650ab776b484b6069de444400517da6935e84e66
SHA512

d178c3665f5d53cf18b395bfe4be5f4956e64e453cf57a129555dba6c9fd891b7e12f3ecc1b92b96f849a514db63543b1ce4abe1e3afb0faa097ca4ae83076ea
SSDEEP

3072:GhDnfSnIoEVy3JlPIh3tsgR38q6F/mtvow:GhDnfSQD6/w

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  61395b8bc4d23a0d78156f9554246a57_JaffaCakes118
- Size
  
  99KB
- MD5
  
  61395b8bc4d23a0d78156f9554246a57
- SHA1
  
  0524e2ed9a08a0d29ab508b88719a175e3601ad1
- SHA256
  
  1b43c31b317a1cfaf56d1d32650ab776b484b6069de444400517da6935e84e66
- SHA512
  
  d178c3665f5d53cf18b395bfe4be5f4956e64e453cf57a129555dba6c9fd891b7e12f3ecc1b92b96f849a514db63543b1ce4abe1e3afb0faa097ca4ae83076ea
- SSDEEP
  
  3072:GhDnfSnIoEVy3JlPIh3tsgR38q6F/mtvow:GhDnfSQD6/w
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2