socgholish | e21c57b38cfe5468e0eb150f5949fa6c5585598bb0eb4d21ba3b49ce54a7bc81 | Triage

Sharing

General

Target

a8169f95e4ce585e21507260e6b0efd6_JaffaCakes118
Size

91KB
Sample

241127-qvsv5asjam
MD5

a8169f95e4ce585e21507260e6b0efd6
SHA1

c8ce9b9beab9724f5b6c82a727528a7bdbc8b953
SHA256

e21c57b38cfe5468e0eb150f5949fa6c5585598bb0eb4d21ba3b49ce54a7bc81
SHA512

2964010774df04e48a55e9b3a7768141c498ec648f4e5b56da90d91d0d8ba2bf7e3b6352a780e304df9d7215eb20ee96cb45ebc708e3b9b79766ae9e122d6a47
SSDEEP

1536:AvJXAUeAJQJ1s5qbXRLuPRHAq7wr0fchdE7DDg+e7zC7pSCkgTLxdHkyUFNl9ls:+JzF5qbXtoBARrSc/UDFwC7pHkgT9dEI

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  a8169f95e4ce585e21507260e6b0efd6_JaffaCakes118
- Size
  
  91KB
- MD5
  
  a8169f95e4ce585e21507260e6b0efd6
- SHA1
  
  c8ce9b9beab9724f5b6c82a727528a7bdbc8b953
- SHA256
  
  e21c57b38cfe5468e0eb150f5949fa6c5585598bb0eb4d21ba3b49ce54a7bc81
- SHA512
  
  2964010774df04e48a55e9b3a7768141c498ec648f4e5b56da90d91d0d8ba2bf7e3b6352a780e304df9d7215eb20ee96cb45ebc708e3b9b79766ae9e122d6a47
- SSDEEP
  
  1536:AvJXAUeAJQJ1s5qbXRLuPRHAq7wr0fchdE7DDg+e7zC7pSCkgTLxdHkyUFNl9ls:+JzF5qbXtoBARrSc/UDFwC7pHkgT9dEI
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2