General

  • Target

    8ac8799a31b3055c7dffa26ff07ca8f1_JaffaCakes118

  • Size

    193KB

  • Sample

    241103-ljnd2s1dpr

  • MD5

    8ac8799a31b3055c7dffa26ff07ca8f1

  • SHA1

    490058c9921bb7f204aaa71cd26311aa5df60ca9

  • SHA256

    4faa08afb384b88a95c0c0f0be59af3b070ce34727026f7ceb42ef0a8d2c09cd

  • SHA512

    fac07818631ba0d10257625bd0f6591cdf2cf537991e79d1df73590f7cbf00942f547c0e408370c9888c404d4d718540bc43913cf7b528ee941edda0622c89e3

  • SSDEEP

    3072:lSnpywl9Nv3c49nSMhMwM0tu/w0gtVRCWejQnEMttgL/:loywl9NomAoiykT

Malware Config

Targets

    • Target

      8ac8799a31b3055c7dffa26ff07ca8f1_JaffaCakes118

    • Size

      193KB

    • MD5

      8ac8799a31b3055c7dffa26ff07ca8f1

    • SHA1

      490058c9921bb7f204aaa71cd26311aa5df60ca9

    • SHA256

      4faa08afb384b88a95c0c0f0be59af3b070ce34727026f7ceb42ef0a8d2c09cd

    • SHA512

      fac07818631ba0d10257625bd0f6591cdf2cf537991e79d1df73590f7cbf00942f547c0e408370c9888c404d4d718540bc43913cf7b528ee941edda0622c89e3

    • SSDEEP

      3072:lSnpywl9Nv3c49nSMhMwM0tu/w0gtVRCWejQnEMttgL/:loywl9NomAoiykT

    • Detected google phishing page

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks