socgholish | b0c6c39b02b55f082bd0f90a819d32c29c1a19e1ed7746173971d61d90754c66 | Triage

Sharing

General

Target

978651ae707fb0d8a52fa92730aefe3d_JaffaCakes118
Size

135KB
Sample

241124-179phsylep
MD5

978651ae707fb0d8a52fa92730aefe3d
SHA1

35b2f0c78e305024c30cba935e4f3394ef378c34
SHA256

b0c6c39b02b55f082bd0f90a819d32c29c1a19e1ed7746173971d61d90754c66
SHA512

f82f894e4835dfd89b3f9cc3f7bd14b73f7b8498c192a591b3971b0354fbce5642c0a6b0babfc4709c3e07dbdb5ffeeb11957483c1da8f33a5de88c730b0f2ce
SSDEEP

3072:HI0x9mzClwr0yPVx+eqI5+1DqiHCw8tDZfSa:Tx9m70yPVx+eN5gK

Score

10^/10

socgholish google discovery downloader phishing

Malware Config

Targets

- Target
  
  978651ae707fb0d8a52fa92730aefe3d_JaffaCakes118
- Size
  
  135KB
- MD5
  
  978651ae707fb0d8a52fa92730aefe3d
- SHA1
  
  35b2f0c78e305024c30cba935e4f3394ef378c34
- SHA256
  
  b0c6c39b02b55f082bd0f90a819d32c29c1a19e1ed7746173971d61d90754c66
- SHA512
  
  f82f894e4835dfd89b3f9cc3f7bd14b73f7b8498c192a591b3971b0354fbce5642c0a6b0babfc4709c3e07dbdb5ffeeb11957483c1da8f33a5de88c730b0f2ce
- SSDEEP
  
  3072:HI0x9mzClwr0yPVx+eqI5+1DqiHCw8tDZfSa:Tx9m70yPVx+eN5gK
Score

10^/10

socgholish google discovery downloader phishing
- Detected google phishing page
  phishing google
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishgooglediscoverydownloaderphishing

behavioral2