socgholish | 199ea14430f0fcff4c87c793cd62a8cebba735baa6d8c9cfcfbc0b4258da4781 | Triage

Sharing

General

Target

ac858fbe29b6ae66c5300b18d86fdad3_JaffaCakes118
Size

137KB
Sample

241128-qz6msayqgs
MD5

ac858fbe29b6ae66c5300b18d86fdad3
SHA1

f7026411820810ee0e94ce56c717d2621a2546a6
SHA256

199ea14430f0fcff4c87c793cd62a8cebba735baa6d8c9cfcfbc0b4258da4781
SHA512

48d44ef488c68b7aa48dfb2a06d1c84f6f551a0b71b504347d152cb6b90913ce2f6146549997f4976a83347a2f4a68810cb8813292af6bcdf3607486f3320e89
SSDEEP

3072:ZTgpBXdYvSOCirqiigLKe5usc7odsh/22DKFBtp:ZMpBcSOCirqiigLKSuscU

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  ac858fbe29b6ae66c5300b18d86fdad3_JaffaCakes118
- Size
  
  137KB
- MD5
  
  ac858fbe29b6ae66c5300b18d86fdad3
- SHA1
  
  f7026411820810ee0e94ce56c717d2621a2546a6
- SHA256
  
  199ea14430f0fcff4c87c793cd62a8cebba735baa6d8c9cfcfbc0b4258da4781
- SHA512
  
  48d44ef488c68b7aa48dfb2a06d1c84f6f551a0b71b504347d152cb6b90913ce2f6146549997f4976a83347a2f4a68810cb8813292af6bcdf3607486f3320e89
- SSDEEP
  
  3072:ZTgpBXdYvSOCirqiigLKe5usc7odsh/22DKFBtp:ZMpBcSOCirqiigLKSuscU
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2