socgholish | 1c01d6ac072a2ed7ff5100d97ced85a4b1d1d6080450ef14a6b07c42de01dd18 | Triage

Sharing

General

Target

78501e225bb5f991d7c1ad3b74d556a5_JaffaCakes118
Size

64KB
Sample

241028-ht8wystejq
MD5

78501e225bb5f991d7c1ad3b74d556a5
SHA1

60f3903d7a242187c28bf729a58d235fb5e53664
SHA256

1c01d6ac072a2ed7ff5100d97ced85a4b1d1d6080450ef14a6b07c42de01dd18
SHA512

7eb88c3a08fe1c52d1c4c0d6aa4e16a8e1f0129253979a0d19df1f91c4b15c101a16f28631d60fad8abcd58cbb6de5c55f3ea0c724925e83f4a2e8ece730a499
SSDEEP

1536:ZjzGwhEGtlNJQL1s2SwKjcsb4Hsj4gJwf1dttqx9:ZjzGwhEGtlNz2Szjcsb4Hsj4gJOdttqn

Score

10^/10

socgholish discovery downloader motw phishing

Malware Config

Targets

- Target
  
  78501e225bb5f991d7c1ad3b74d556a5_JaffaCakes118
- Size
  
  64KB
- MD5
  
  78501e225bb5f991d7c1ad3b74d556a5
- SHA1
  
  60f3903d7a242187c28bf729a58d235fb5e53664
- SHA256
  
  1c01d6ac072a2ed7ff5100d97ced85a4b1d1d6080450ef14a6b07c42de01dd18
- SHA512
  
  7eb88c3a08fe1c52d1c4c0d6aa4e16a8e1f0129253979a0d19df1f91c4b15c101a16f28631d60fad8abcd58cbb6de5c55f3ea0c724925e83f4a2e8ece730a499
- SSDEEP
  
  1536:ZjzGwhEGtlNJQL1s2SwKjcsb4Hsj4gJwf1dttqx9:ZjzGwhEGtlNz2Szjcsb4Hsj4gJOdttqn
Score

10^/10

socgholish discovery downloader motw phishing
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloadermotwphishing

behavioral2

discoverymotwphishing