socgholish | 50c3d0d535375ccd4ff5daa6391c95238ac38b2c3db7dd1ffd9a4abe219cfb93 | Triage

Sharing

General

Target

94ebaac4ef2edc2efea4049f27ee7be1_JaffaCakes118
Size

73KB
Sample

241124-qlebdaxpcj
MD5

94ebaac4ef2edc2efea4049f27ee7be1
SHA1

6ee5f0d448a989e5bd45598720e3dcb3edcf8b4a
SHA256

50c3d0d535375ccd4ff5daa6391c95238ac38b2c3db7dd1ffd9a4abe219cfb93
SHA512

15a9a889362599fad9f8678f3753aa761c8feabb662f59708314eee462ee43f3d5d11c3578c3ab7e6ef3f8b612b2b7c2d7e8e87674c3a100ea8ff94d21175683
SSDEEP

1536:9LNCGEx04GXE63rq/C+X69hg3kwKTlqAbgYJO9:9LNWKt3rqTXChg3kwIbgYJO9

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  94ebaac4ef2edc2efea4049f27ee7be1_JaffaCakes118
- Size
  
  73KB
- MD5
  
  94ebaac4ef2edc2efea4049f27ee7be1
- SHA1
  
  6ee5f0d448a989e5bd45598720e3dcb3edcf8b4a
- SHA256
  
  50c3d0d535375ccd4ff5daa6391c95238ac38b2c3db7dd1ffd9a4abe219cfb93
- SHA512
  
  15a9a889362599fad9f8678f3753aa761c8feabb662f59708314eee462ee43f3d5d11c3578c3ab7e6ef3f8b612b2b7c2d7e8e87674c3a100ea8ff94d21175683
- SSDEEP
  
  1536:9LNCGEx04GXE63rq/C+X69hg3kwKTlqAbgYJO9:9LNWKt3rqTXChg3kwIbgYJO9
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2