socgholish | dab1c6dd65c14c8c890a7a9e6baf3d540864eec70d4c96934c878511f63e0b5a | Triage

Sharing

General

Target

7b7c3e5e782e24d942715c9ce407057d_JaffaCakes118
Size

110KB
Sample

241029-cr3dhasfjh
MD5

7b7c3e5e782e24d942715c9ce407057d
SHA1

5205111c661d5dc2a1807d3b391cea5114a41e57
SHA256

dab1c6dd65c14c8c890a7a9e6baf3d540864eec70d4c96934c878511f63e0b5a
SHA512

800304c8fa85e604e98722c9f0886eadf5e4a6d61daeea83927a9955f7cd1b5366e243ac1b9cdb51342dfb5b6cc3181a99a19725a4d48b5f3fb962aab7a0512c
SSDEEP

768:NFNNYGZ0qB8qfKOiC/pl4arCNKfhEvC5U09/MJGt20vhpnehOH0L5oP+okGGNQps:PiOiC/plJWNK5tU5JG00v/VGNQDHpg

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  7b7c3e5e782e24d942715c9ce407057d_JaffaCakes118
- Size
  
  110KB
- MD5
  
  7b7c3e5e782e24d942715c9ce407057d
- SHA1
  
  5205111c661d5dc2a1807d3b391cea5114a41e57
- SHA256
  
  dab1c6dd65c14c8c890a7a9e6baf3d540864eec70d4c96934c878511f63e0b5a
- SHA512
  
  800304c8fa85e604e98722c9f0886eadf5e4a6d61daeea83927a9955f7cd1b5366e243ac1b9cdb51342dfb5b6cc3181a99a19725a4d48b5f3fb962aab7a0512c
- SSDEEP
  
  768:NFNNYGZ0qB8qfKOiC/pl4arCNKfhEvC5U09/MJGt20vhpnehOH0L5oP+okGGNQps:PiOiC/plJWNK5tU5JG00v/VGNQDHpg
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2