socgholish | ffef171835d3d2057f9484f3fe21726c645dd44f607a31701634dc9fad58d736 | Triage

Sharing

General

Target

a08a8bfe30fa399675805f08d1cf35a9_JaffaCakes118
Size

209KB
Sample

241126-h3l4jsxlbj
MD5

a08a8bfe30fa399675805f08d1cf35a9
SHA1

0146aa5d184d77f476cdacd298604c8b984122d9
SHA256

ffef171835d3d2057f9484f3fe21726c645dd44f607a31701634dc9fad58d736
SHA512

e2e9d89bfd31ed80ed8eb173b2458176210f01dc5fb699669fb9673f108e1def6b875af67853de2f06aff7c391bb69d3e7a3f60ffd46b77c75238e92cc334292
SSDEEP

3072:L6JXanmdWNlBe526Bdr4ACFZx1irKTTJtDSNyJmoTmVrhl4D:yXanztvD/

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  a08a8bfe30fa399675805f08d1cf35a9_JaffaCakes118
- Size
  
  209KB
- MD5
  
  a08a8bfe30fa399675805f08d1cf35a9
- SHA1
  
  0146aa5d184d77f476cdacd298604c8b984122d9
- SHA256
  
  ffef171835d3d2057f9484f3fe21726c645dd44f607a31701634dc9fad58d736
- SHA512
  
  e2e9d89bfd31ed80ed8eb173b2458176210f01dc5fb699669fb9673f108e1def6b875af67853de2f06aff7c391bb69d3e7a3f60ffd46b77c75238e92cc334292
- SSDEEP
  
  3072:L6JXanmdWNlBe526Bdr4ACFZx1irKTTJtDSNyJmoTmVrhl4D:yXanztvD/
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2