socgholish | de5b992636e172704c7933958549e3834e0d19c004ca609ec617bb4d4f6f62dc | Triage

Sharing

General

Target

ac340b4ade94e71d15e1d305fad5a609_JaffaCakes118
Size

113KB
Sample

241128-nt7lsaskfp
MD5

ac340b4ade94e71d15e1d305fad5a609
SHA1

c7d712aaabb6c4edd4a61c6ad3bf0cc615be8b43
SHA256

de5b992636e172704c7933958549e3834e0d19c004ca609ec617bb4d4f6f62dc
SHA512

c37390bbf7dd48302ab35583a4b07b1961e16ec6520e8dafa0fd1dd176478fddffbc855c06d28db799ee8e1bffba8230a2cb0e86ac0b633b71eafdc6e298e37d
SSDEEP

3072:aPEijZeqLVEijZeqLczyNiY/A5eGqyKr6B1R4XGHULpcSuxw0sVAxx+zs:aPEijZeqLVEijZeqLc8iEA51t

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  ac340b4ade94e71d15e1d305fad5a609_JaffaCakes118
- Size
  
  113KB
- MD5
  
  ac340b4ade94e71d15e1d305fad5a609
- SHA1
  
  c7d712aaabb6c4edd4a61c6ad3bf0cc615be8b43
- SHA256
  
  de5b992636e172704c7933958549e3834e0d19c004ca609ec617bb4d4f6f62dc
- SHA512
  
  c37390bbf7dd48302ab35583a4b07b1961e16ec6520e8dafa0fd1dd176478fddffbc855c06d28db799ee8e1bffba8230a2cb0e86ac0b633b71eafdc6e298e37d
- SSDEEP
  
  3072:aPEijZeqLVEijZeqLczyNiY/A5eGqyKr6B1R4XGHULpcSuxw0sVAxx+zs:aPEijZeqLVEijZeqLc8iEA51t
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2