socgholish | 895feaaf667b728196d90e91b8b1489376e7bbb26fd8bc97582dcb0b5660b0f5 | Triage

Sharing

General

Target

64ee8750ea0bfd729c22ea8b62f459f8_JaffaCakes118
Size

355KB
Sample

241021-a5d7qazdnd
MD5

64ee8750ea0bfd729c22ea8b62f459f8
SHA1

18e5f6c716055c9acbcad157df8db090593851fa
SHA256

895feaaf667b728196d90e91b8b1489376e7bbb26fd8bc97582dcb0b5660b0f5
SHA512

c4013189dbbcc5ff0cbc79fab56d63228a73a1452c1ec0263dcec0d7886f47287e26b9c4ee845d6a1b308217907b3de14786ee888abcb0e7ea1e16c3f20f1b9c
SSDEEP

3072:w1W6WCiqYxDNvG8rmgcXmNRSz7vLer71BMn3/EBmGTEiVzquto4z8Sr4c7RJvfyu:pDAXmNRk2dEN+oFu

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  64ee8750ea0bfd729c22ea8b62f459f8_JaffaCakes118
- Size
  
  355KB
- MD5
  
  64ee8750ea0bfd729c22ea8b62f459f8
- SHA1
  
  18e5f6c716055c9acbcad157df8db090593851fa
- SHA256
  
  895feaaf667b728196d90e91b8b1489376e7bbb26fd8bc97582dcb0b5660b0f5
- SHA512
  
  c4013189dbbcc5ff0cbc79fab56d63228a73a1452c1ec0263dcec0d7886f47287e26b9c4ee845d6a1b308217907b3de14786ee888abcb0e7ea1e16c3f20f1b9c
- SSDEEP
  
  3072:w1W6WCiqYxDNvG8rmgcXmNRSz7vLer71BMn3/EBmGTEiVzquto4z8Sr4c7RJvfyu:pDAXmNRk2dEN+oFu
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2