socgholish | 26c76302b14ba81f092dbee99ae0c72c5a401b72b736ddffea284b98f5e92a2a | Triage

Sharing

General

Target

a1cd430b383b4fcc7cebd881fa897be9_JaffaCakes118
Size

117KB
Sample

241126-n642eszpcs
MD5

a1cd430b383b4fcc7cebd881fa897be9
SHA1

a5230187cd98391a17daff4b80c83a397cad9c1c
SHA256

26c76302b14ba81f092dbee99ae0c72c5a401b72b736ddffea284b98f5e92a2a
SHA512

98abeaaa9597c1025a6f8230a34fac3d3c53197a77fa67d1bba21ae9b2e7346f81664e1b8d34a55f46c6608826ca34a261ddd9dc9ebe4e7e18cd534d2d703a0f
SSDEEP

3072:BHz3RAe5fT22Llt8aN9+5K7QdJnmktMGb5:BHzKS22Llt8aN9+hX

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  a1cd430b383b4fcc7cebd881fa897be9_JaffaCakes118
- Size
  
  117KB
- MD5
  
  a1cd430b383b4fcc7cebd881fa897be9
- SHA1
  
  a5230187cd98391a17daff4b80c83a397cad9c1c
- SHA256
  
  26c76302b14ba81f092dbee99ae0c72c5a401b72b736ddffea284b98f5e92a2a
- SHA512
  
  98abeaaa9597c1025a6f8230a34fac3d3c53197a77fa67d1bba21ae9b2e7346f81664e1b8d34a55f46c6608826ca34a261ddd9dc9ebe4e7e18cd534d2d703a0f
- SSDEEP
  
  3072:BHz3RAe5fT22Llt8aN9+5K7QdJnmktMGb5:BHzKS22Llt8aN9+hX
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2