socgholish | 90460c55996d806baaac0ee64c02a4fd0d6713ed3b0254bfad2b20026e10a74a | Triage

Sharing

General

Target

8e736baa9eb3a61adada5acb68d9a08d_JaffaCakes118
Size

80KB
Sample

241104-brhhnazgkn
MD5

8e736baa9eb3a61adada5acb68d9a08d
SHA1

ba018f3f63eca00528cbc04ac854ecc758c664ac
SHA256

90460c55996d806baaac0ee64c02a4fd0d6713ed3b0254bfad2b20026e10a74a
SHA512

4f165d4eb45e3c3bf684314f364741ec0655dfbc91b4fbe41895bb673ee0244199b4829fdae6cee9e1628bae478374c1323c8fb75c13c93c13b4e10f4450fb13
SSDEEP

1536:zpfxCZb5UdcN3onzkvD/zg1AJScSMtuCPhBy:1fxCDU2o4Drg/ltCPhBy

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  8e736baa9eb3a61adada5acb68d9a08d_JaffaCakes118
- Size
  
  80KB
- MD5
  
  8e736baa9eb3a61adada5acb68d9a08d
- SHA1
  
  ba018f3f63eca00528cbc04ac854ecc758c664ac
- SHA256
  
  90460c55996d806baaac0ee64c02a4fd0d6713ed3b0254bfad2b20026e10a74a
- SHA512
  
  4f165d4eb45e3c3bf684314f364741ec0655dfbc91b4fbe41895bb673ee0244199b4829fdae6cee9e1628bae478374c1323c8fb75c13c93c13b4e10f4450fb13
- SSDEEP
  
  1536:zpfxCZb5UdcN3onzkvD/zg1AJScSMtuCPhBy:1fxCDU2o4Drg/ltCPhBy
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2