socgholish | d18e9db6566d08d5938801e447f8d792c9e7f3f7caae3dfb4ed81b956f2f480a | Triage

Sharing

General

Target

94f2caa09b0dfc548d129930846ecd06_JaffaCakes118
Size

50KB
Sample

241124-qpk84a1paz
MD5

94f2caa09b0dfc548d129930846ecd06
SHA1

eed9c6fb038d00e651677e85480e2fcd22d3c411
SHA256

d18e9db6566d08d5938801e447f8d792c9e7f3f7caae3dfb4ed81b956f2f480a
SHA512

46dcbc93fc8cfa51bbf70a88c595a76c7d4fd6503fa66c62570e2ed3488773ecd4b6784dcb17b86d8c84c57f6491c384d4be7890dec6175850d68a36d1bb2eb7
SSDEEP

1536:cPDMtXqUhVKrdhVKr3y+7GVAGj+r2t9s7:cPDMlqv+7GVAF2t9s7

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  94f2caa09b0dfc548d129930846ecd06_JaffaCakes118
- Size
  
  50KB
- MD5
  
  94f2caa09b0dfc548d129930846ecd06
- SHA1
  
  eed9c6fb038d00e651677e85480e2fcd22d3c411
- SHA256
  
  d18e9db6566d08d5938801e447f8d792c9e7f3f7caae3dfb4ed81b956f2f480a
- SHA512
  
  46dcbc93fc8cfa51bbf70a88c595a76c7d4fd6503fa66c62570e2ed3488773ecd4b6784dcb17b86d8c84c57f6491c384d4be7890dec6175850d68a36d1bb2eb7
- SSDEEP
  
  1536:cPDMtXqUhVKrdhVKr3y+7GVAGj+r2t9s7:cPDMlqv+7GVAF2t9s7
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2