socgholish | d24c1e550291dcb5f6b510d161eb7bfabfbf1bfbc12fb6a736ee8ef69cd1758c | Triage

Sharing

General

Target

6debabe7f1e858940daf04883a56a150_JaffaCakes118
Size

100KB
Sample

241023-kc94sszena
MD5

6debabe7f1e858940daf04883a56a150
SHA1

e230f080c119428b043c9ef6fc7e8f7d95595b48
SHA256

d24c1e550291dcb5f6b510d161eb7bfabfbf1bfbc12fb6a736ee8ef69cd1758c
SHA512

be577031c9cf38d6b2bd676b1decf3b75a18fc1bd0f9e101571652618135a2a8d458aaf486679cdc67c9a294fc548c885b66b5fd77666804537ea1dc12df0854
SSDEEP

3072:GLDnfSnIoEVysyJlPI8+zmwgR/uIbp5Ztu2I2:GLDnfSQ1AXxI2

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  6debabe7f1e858940daf04883a56a150_JaffaCakes118
- Size
  
  100KB
- MD5
  
  6debabe7f1e858940daf04883a56a150
- SHA1
  
  e230f080c119428b043c9ef6fc7e8f7d95595b48
- SHA256
  
  d24c1e550291dcb5f6b510d161eb7bfabfbf1bfbc12fb6a736ee8ef69cd1758c
- SHA512
  
  be577031c9cf38d6b2bd676b1decf3b75a18fc1bd0f9e101571652618135a2a8d458aaf486679cdc67c9a294fc548c885b66b5fd77666804537ea1dc12df0854
- SSDEEP
  
  3072:GLDnfSnIoEVysyJlPI8+zmwgR/uIbp5Ztu2I2:GLDnfSQ1AXxI2
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2