socgholish | 9d7ae5a2007d487967ccc8c86b2c6b235f8bafbc2f210bf4e4efed4a5a4a64ec | Triage

Submit
Reports

Overview

overview

Static

static

1

77302aad4b...8.html

windows7-x64

77302aad4b...8.html

windows10-2004-x64

6

Sharing

General

Target

77302aad4be17293f406a0d0987b23d4_JaffaCakes118
Size

212KB
Sample

241028-ctbnkaydml
MD5

77302aad4be17293f406a0d0987b23d4
SHA1

36029fa40fbddba79cb6eedb918453c545b336a6
SHA256

9d7ae5a2007d487967ccc8c86b2c6b235f8bafbc2f210bf4e4efed4a5a4a64ec
SHA512

ce77c552894aa73ca3634e6cbe76f0adf6be1772d511f6dbf9d8a9eb789dfbf828dbb6d372eadd2195941b660abc5721ee872a82e658414bae01f244dfd98277
SSDEEP

3072:XCss6oddhW794/orMhYkHDaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsq:phrMVDaL3vCIeK

Score

10^/10

socgholish discovery downloader

Static task

static1

Behavioral task

behavioral1

Sample

77302aad4be17293f406a0d0987b23d4_JaffaCakes118.html

Resource

win7-20240903-en

socgholish discovery downloader

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

77302aad4be17293f406a0d0987b23d4_JaffaCakes118.html

Resource

win10v2004-20241007-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  77302aad4be17293f406a0d0987b23d4_JaffaCakes118
- Size
  
  212KB
- MD5
  
  77302aad4be17293f406a0d0987b23d4
- SHA1
  
  36029fa40fbddba79cb6eedb918453c545b336a6
- SHA256
  
  9d7ae5a2007d487967ccc8c86b2c6b235f8bafbc2f210bf4e4efed4a5a4a64ec
- SHA512
  
  ce77c552894aa73ca3634e6cbe76f0adf6be1772d511f6dbf9d8a9eb789dfbf828dbb6d372eadd2195941b660abc5721ee872a82e658414bae01f244dfd98277
- SSDEEP
  
  3072:XCss6oddhW794/orMhYkHDaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsq:phrMVDaL3vCIeK
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2

© 2018-2025

Terms | Privacy