General

  • Target

    a1e721456ffc8f34dcd3639287675554_JaffaCakes118

  • Size

    93KB

  • Sample

    241126-pjwxza1kex

  • MD5

    a1e721456ffc8f34dcd3639287675554

  • SHA1

    e4700443d0844662013cc32c7bafff9b7bade439

  • SHA256

    71cb615eadba4239c8c4db0c512fc7c32f81ce0a36791264a500cc8bb35f7b5e

  • SHA512

    d48bdd2eb0e63f955be1bfb10303bdecf7ff880aead931431a091bec803fc7fc3794c296ba9dc2a249965dfaef4af393f1d153276ac895c3e1178a1a18715175

  • SSDEEP

    1536:vqtMP3zTCNnRJSwDob/SGXZbmQGgmnpjdWZFaTe+vsMYekJiWxczXSn6KxcIBq/D:vqteTYJSMk/PXZbmDgypjdWZFaTe+vFv

Malware Config

Targets

    • Target

      a1e721456ffc8f34dcd3639287675554_JaffaCakes118

    • Size

      93KB

    • MD5

      a1e721456ffc8f34dcd3639287675554

    • SHA1

      e4700443d0844662013cc32c7bafff9b7bade439

    • SHA256

      71cb615eadba4239c8c4db0c512fc7c32f81ce0a36791264a500cc8bb35f7b5e

    • SHA512

      d48bdd2eb0e63f955be1bfb10303bdecf7ff880aead931431a091bec803fc7fc3794c296ba9dc2a249965dfaef4af393f1d153276ac895c3e1178a1a18715175

    • SSDEEP

      1536:vqtMP3zTCNnRJSwDob/SGXZbmQGgmnpjdWZFaTe+vsMYekJiWxczXSn6KxcIBq/D:vqteTYJSMk/PXZbmDgypjdWZFaTe+vFv

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • A potential corporate email address has been identified in the URL: QמN@ײr

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks