socgholish | 37d83f9a51b918633ea3850bce80653eb804b6cf9fdc2d66b2f7b3e8e628f5d2 | Triage

Sharing

General

Target

7fd6b2d81d4d0069398930149fa97c37_JaffaCakes118
Size

170KB
Sample

241030-td9dbsvrat
MD5

7fd6b2d81d4d0069398930149fa97c37
SHA1

ff10b2d9541e133dc9b9360df1723a598626a68a
SHA256

37d83f9a51b918633ea3850bce80653eb804b6cf9fdc2d66b2f7b3e8e628f5d2
SHA512

e9dc686a884cc9e2d089f4d103737d7b44cbe3acb683ca7079c1190271e2f98083335be882a100f9ce6c7dea22b74f2cfd58882edbea5d0ae4346bd2edae2cfe
SSDEEP

3072:grChsQpoM5baEqQkZvk0fC4PwKlGPzx9r4ENuTtWXLGykJlQwmEiH9bhN081rx6n:grIsQpoM5baEqQuv1h8x9r4ENuTtWXLk

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  7fd6b2d81d4d0069398930149fa97c37_JaffaCakes118
- Size
  
  170KB
- MD5
  
  7fd6b2d81d4d0069398930149fa97c37
- SHA1
  
  ff10b2d9541e133dc9b9360df1723a598626a68a
- SHA256
  
  37d83f9a51b918633ea3850bce80653eb804b6cf9fdc2d66b2f7b3e8e628f5d2
- SHA512
  
  e9dc686a884cc9e2d089f4d103737d7b44cbe3acb683ca7079c1190271e2f98083335be882a100f9ce6c7dea22b74f2cfd58882edbea5d0ae4346bd2edae2cfe
- SSDEEP
  
  3072:grChsQpoM5baEqQkZvk0fC4PwKlGPzx9r4ENuTtWXLGykJlQwmEiH9bhN081rx6n:grIsQpoM5baEqQuv1h8x9r4ENuTtWXLk
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2