socgholish | 06291a72a9afc31a7d21479bd03a7adb7eb25d9de070fb6284e7850c73df4830 | Triage

Sharing

General

Target

70afd700699206f7f44a8452a0d16cf5_JaffaCakes118
Size

151KB
Sample

241023-zacsvazhpl
MD5

70afd700699206f7f44a8452a0d16cf5
SHA1

524de28e8e9e57ab44036aef255922ebf045bac7
SHA256

06291a72a9afc31a7d21479bd03a7adb7eb25d9de070fb6284e7850c73df4830
SHA512

b24dbd910ffe6d40c511c10d1631976ac36cc604f07c3ef75552ffdaf07da0bdaf9ff1f51e23f58a62ac0d15fa9a4ea8029771b9af304656ba298b6a42e6113b
SSDEEP

3072:HkclVIcYuHt7YJp+N18lW+S/CSEsvMgqodPheNPt92tNTi:Hkcla1uN7YJwj8zkCsGBMi

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  70afd700699206f7f44a8452a0d16cf5_JaffaCakes118
- Size
  
  151KB
- MD5
  
  70afd700699206f7f44a8452a0d16cf5
- SHA1
  
  524de28e8e9e57ab44036aef255922ebf045bac7
- SHA256
  
  06291a72a9afc31a7d21479bd03a7adb7eb25d9de070fb6284e7850c73df4830
- SHA512
  
  b24dbd910ffe6d40c511c10d1631976ac36cc604f07c3ef75552ffdaf07da0bdaf9ff1f51e23f58a62ac0d15fa9a4ea8029771b9af304656ba298b6a42e6113b
- SSDEEP
  
  3072:HkclVIcYuHt7YJp+N18lW+S/CSEsvMgqodPheNPt92tNTi:Hkcla1uN7YJwj8zkCsGBMi
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2