socgholish | e1069d4df4d3adacbe16fe0a4567c79400709d1bbcfeb38df8ae552138a0e6e5 | Triage

Sharing

General

Target

af19fac9d04d0212cd66c381e262bb16_JaffaCakes118
Size

43KB
Sample

241129-fwnmpaxmds
MD5

af19fac9d04d0212cd66c381e262bb16
SHA1

7ed6de1e0885ac12a28f58e2c735c39d823f2fda
SHA256

e1069d4df4d3adacbe16fe0a4567c79400709d1bbcfeb38df8ae552138a0e6e5
SHA512

85a5e41a4cb4aa542179dedcb858debecdbd8132ede73908e17d23ce764808de4adb9c66903a0b6c49cbf5f7571651b38926ea0ab940c65a24f5b8445b0624a1
SSDEEP

768:S35LtTo/2xSMg3fS5xjxt9eEoBXifLtTC:SpRTu2xxEfSjjxt0hCRTC

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  af19fac9d04d0212cd66c381e262bb16_JaffaCakes118
- Size
  
  43KB
- MD5
  
  af19fac9d04d0212cd66c381e262bb16
- SHA1
  
  7ed6de1e0885ac12a28f58e2c735c39d823f2fda
- SHA256
  
  e1069d4df4d3adacbe16fe0a4567c79400709d1bbcfeb38df8ae552138a0e6e5
- SHA512
  
  85a5e41a4cb4aa542179dedcb858debecdbd8132ede73908e17d23ce764808de4adb9c66903a0b6c49cbf5f7571651b38926ea0ab940c65a24f5b8445b0624a1
- SSDEEP
  
  768:S35LtTo/2xSMg3fS5xjxt9eEoBXifLtTC:SpRTu2xxEfSjjxt0hCRTC
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2