socgholish | ba8642b9e7d8395eedbb92496337f2d47a5e41cf952281fa1acf091d8c241d7f | Triage

Sharing

General

Target

6ff7678e16d644b98fb1727832779cf8_JaffaCakes118
Size

550KB
Sample

241023-vl2h5atalr
MD5

6ff7678e16d644b98fb1727832779cf8
SHA1

eddf2fcb987fc12ddb2aa713408a825e72c63f92
SHA256

ba8642b9e7d8395eedbb92496337f2d47a5e41cf952281fa1acf091d8c241d7f
SHA512

75b95492d9019c0aff0eda7d9cd78a4baffff0bea3c123522bcea3d3422808402080f1fe2bb0e432b063ca15ad567d62574c0bd95fa0e102b18ab2f7820152eb
SSDEEP

3072:bmloYlqq+XNQKnVodAhIiY4J4SpuCA0difA1bJDSJy3D7i1D5XaLoVbmN37aFqY7:zq+3e

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  6ff7678e16d644b98fb1727832779cf8_JaffaCakes118
- Size
  
  550KB
- MD5
  
  6ff7678e16d644b98fb1727832779cf8
- SHA1
  
  eddf2fcb987fc12ddb2aa713408a825e72c63f92
- SHA256
  
  ba8642b9e7d8395eedbb92496337f2d47a5e41cf952281fa1acf091d8c241d7f
- SHA512
  
  75b95492d9019c0aff0eda7d9cd78a4baffff0bea3c123522bcea3d3422808402080f1fe2bb0e432b063ca15ad567d62574c0bd95fa0e102b18ab2f7820152eb
- SSDEEP
  
  3072:bmloYlqq+XNQKnVodAhIiY4J4SpuCA0difA1bJDSJy3D7i1D5XaLoVbmN37aFqY7:zq+3e
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2