socgholish | 8a49d48e0326947f6cc32471460f0d2a2296f5da7bdebab01f81c630d4ae2726 | Triage

Sharing

General

Target

67101d5596ee8a73af1095eb063bcb17_JaffaCakes118
Size

110KB
Sample

241021-v78vbszcpd
MD5

67101d5596ee8a73af1095eb063bcb17
SHA1

d7196eab9ad976b20cf81949f0a3f8e83e195b02
SHA256

8a49d48e0326947f6cc32471460f0d2a2296f5da7bdebab01f81c630d4ae2726
SHA512

80fab946363be9a627228b261b67c4b8f64f5b9762b02e2685fb816082d4fe7fe8290822d938dd9f586398b660e6c4f6982bc39fee56c8308e8944257af80a16
SSDEEP

3072:B1Lp1Fy5edZKcXmNRSjsrN3MvahY9nTz0D1/dG3101OO:zLp1FRXmNRiE

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  67101d5596ee8a73af1095eb063bcb17_JaffaCakes118
- Size
  
  110KB
- MD5
  
  67101d5596ee8a73af1095eb063bcb17
- SHA1
  
  d7196eab9ad976b20cf81949f0a3f8e83e195b02
- SHA256
  
  8a49d48e0326947f6cc32471460f0d2a2296f5da7bdebab01f81c630d4ae2726
- SHA512
  
  80fab946363be9a627228b261b67c4b8f64f5b9762b02e2685fb816082d4fe7fe8290822d938dd9f586398b660e6c4f6982bc39fee56c8308e8944257af80a16
- SSDEEP
  
  3072:B1Lp1Fy5edZKcXmNRSjsrN3MvahY9nTz0D1/dG3101OO:zLp1FRXmNRiE
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2