socgholish | 5e64c9312a69a2233dbc830177a6112b8d0ec661b86ffc23d7b8944158295e28 | Triage

Sharing

General

Target

61630bfd456edbc088278bc6afea02d1_JaffaCakes118
Size

105KB
Sample

241020-kwp8qs1grp
MD5

61630bfd456edbc088278bc6afea02d1
SHA1

72121795c8957dba0c798163693f04bcbfd83862
SHA256

5e64c9312a69a2233dbc830177a6112b8d0ec661b86ffc23d7b8944158295e28
SHA512

1af7e61d7233a22465f3474912dfac2b5dccb712b6e59fbf2f93ed147446af2e6d7e4193ffcb0ac14a56051327b6713eece644d10bfab75184c9f26ccf527d2c
SSDEEP

3072:XtZVYlAMYznpBgoB59bBxmsUgw5HAH4L1PE:dZVMARznpBgoBjUgw5HAz

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  61630bfd456edbc088278bc6afea02d1_JaffaCakes118
- Size
  
  105KB
- MD5
  
  61630bfd456edbc088278bc6afea02d1
- SHA1
  
  72121795c8957dba0c798163693f04bcbfd83862
- SHA256
  
  5e64c9312a69a2233dbc830177a6112b8d0ec661b86ffc23d7b8944158295e28
- SHA512
  
  1af7e61d7233a22465f3474912dfac2b5dccb712b6e59fbf2f93ed147446af2e6d7e4193ffcb0ac14a56051327b6713eece644d10bfab75184c9f26ccf527d2c
- SSDEEP
  
  3072:XtZVYlAMYznpBgoB59bBxmsUgw5HAH4L1PE:dZVMARznpBgoBjUgw5HAz
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2