socgholish | b58a0a37bbeffb4bada59ae601668cc2671069acb387e8934281f06a88638812 | Triage

Sharing

General

Target

a0c454922a2235ca1b6c10844348915d_JaffaCakes118
Size

117KB
Sample

241126-jzg6vsynfr
MD5

a0c454922a2235ca1b6c10844348915d
SHA1

c2a0876b1785e5b6d63141369369c5745db48cbc
SHA256

b58a0a37bbeffb4bada59ae601668cc2671069acb387e8934281f06a88638812
SHA512

9a3baa9dc3c99e9a963d4e34470ceac1d69914cf39231ba479d91bebce349ca34ace8d4c6151dea231f5546352a0caae2949f36c69521e89b3832ac79273e929
SSDEEP

3072:yEa+DKnhVF5UBgYb32EktVbDL9sucIQ2ytMqv9MC/BA:yEa+DqfPPDL/cIQ2yS

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  a0c454922a2235ca1b6c10844348915d_JaffaCakes118
- Size
  
  117KB
- MD5
  
  a0c454922a2235ca1b6c10844348915d
- SHA1
  
  c2a0876b1785e5b6d63141369369c5745db48cbc
- SHA256
  
  b58a0a37bbeffb4bada59ae601668cc2671069acb387e8934281f06a88638812
- SHA512
  
  9a3baa9dc3c99e9a963d4e34470ceac1d69914cf39231ba479d91bebce349ca34ace8d4c6151dea231f5546352a0caae2949f36c69521e89b3832ac79273e929
- SSDEEP
  
  3072:yEa+DKnhVF5UBgYb32EktVbDL9sucIQ2ytMqv9MC/BA:yEa+DqfPPDL/cIQ2yS
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2