socgholish | 67be7ba68dc3128261e93fb63d1d9d5106b69d9b53fffd5ba7ca7c92a49b3d19 | Triage

Sharing

General

Target

b0a7a5ecfc079fc1535c7beb088aa2cc_JaffaCakes118
Size

185KB
Sample

241129-mkq21azrex
MD5

b0a7a5ecfc079fc1535c7beb088aa2cc
SHA1

4f831909aec3c237dbd9f15aa77f8a86bb453ab5
SHA256

67be7ba68dc3128261e93fb63d1d9d5106b69d9b53fffd5ba7ca7c92a49b3d19
SHA512

6e9bb605c66d78a7e5fb8c3de37383f9790094dfe55524f8ea480dfd0a2d3a551016646691d0a1cedaf5e9b7bca5a2b3ba88a90313255397f0034517a64e57fc
SSDEEP

3072:QRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRSxNdVSYNj4NOiZXv:ocjJ/jXmNRXOD+

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  b0a7a5ecfc079fc1535c7beb088aa2cc_JaffaCakes118
- Size
  
  185KB
- MD5
  
  b0a7a5ecfc079fc1535c7beb088aa2cc
- SHA1
  
  4f831909aec3c237dbd9f15aa77f8a86bb453ab5
- SHA256
  
  67be7ba68dc3128261e93fb63d1d9d5106b69d9b53fffd5ba7ca7c92a49b3d19
- SHA512
  
  6e9bb605c66d78a7e5fb8c3de37383f9790094dfe55524f8ea480dfd0a2d3a551016646691d0a1cedaf5e9b7bca5a2b3ba88a90313255397f0034517a64e57fc
- SSDEEP
  
  3072:QRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRSxNdVSYNj4NOiZXv:ocjJ/jXmNRXOD+
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2