socgholish | 99e144aa36f4c793d95d1172ebd05fc77027be34001c5aec576525c4790f85fb | Triage

Sharing

General

Target

9ff3b02b19d906e135597f691bc71cd4_JaffaCakes118
Size

75KB
Sample

241126-fmvpmswjby
MD5

9ff3b02b19d906e135597f691bc71cd4
SHA1

ad05dabc6f34f0a560efed51a7194c0516d7bc0d
SHA256

99e144aa36f4c793d95d1172ebd05fc77027be34001c5aec576525c4790f85fb
SHA512

45cd723047f681e461f0f9cbbff30f60cfac542a664ef9e090376962fa1f0001ec6fb3ad9b9265b1506a01e0ae4dabfb251b0f6e2ae1347595b205459e846b58
SSDEEP

1536:Hwgr8VSeO33BsFquMctnmiaS6cgRrmg9yp:DeO33BsFRnm3gg9yp

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  9ff3b02b19d906e135597f691bc71cd4_JaffaCakes118
- Size
  
  75KB
- MD5
  
  9ff3b02b19d906e135597f691bc71cd4
- SHA1
  
  ad05dabc6f34f0a560efed51a7194c0516d7bc0d
- SHA256
  
  99e144aa36f4c793d95d1172ebd05fc77027be34001c5aec576525c4790f85fb
- SHA512
  
  45cd723047f681e461f0f9cbbff30f60cfac542a664ef9e090376962fa1f0001ec6fb3ad9b9265b1506a01e0ae4dabfb251b0f6e2ae1347595b205459e846b58
- SSDEEP
  
  1536:Hwgr8VSeO33BsFquMctnmiaS6cgRrmg9yp:DeO33BsFRnm3gg9yp
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2