socgholish | 03da7b9b096fd381bf559c7fd0fc1fd655ee119521b97bf0992b118a8a027cad | Triage

Sharing

General

Target

b1c1165992967935962d002c4f9388fc_JaffaCakes118
Size

127KB
Sample

241129-rg151szket
MD5

b1c1165992967935962d002c4f9388fc
SHA1

89582e93b30ecdf44e2038472d71b4816dcf8bfe
SHA256

03da7b9b096fd381bf559c7fd0fc1fd655ee119521b97bf0992b118a8a027cad
SHA512

8b357a568f58084c24d4d3d3824ace7b6366e36a4a5ed3fbf2a6c36f3585c2088980fd578cfa32a54b3bdb5fb7db6c908db9446cbc1aa23670a22974b402af37
SSDEEP

768:2qk1ATx+Bw24Tp7VDiMidNCiZW0HI8Jj2ECFcsm0IXWhCFAmmv1p4ODMtFA6cVxF:2KHDiMiZdIdECZpZDMtFbcDOXtnn10d

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  b1c1165992967935962d002c4f9388fc_JaffaCakes118
- Size
  
  127KB
- MD5
  
  b1c1165992967935962d002c4f9388fc
- SHA1
  
  89582e93b30ecdf44e2038472d71b4816dcf8bfe
- SHA256
  
  03da7b9b096fd381bf559c7fd0fc1fd655ee119521b97bf0992b118a8a027cad
- SHA512
  
  8b357a568f58084c24d4d3d3824ace7b6366e36a4a5ed3fbf2a6c36f3585c2088980fd578cfa32a54b3bdb5fb7db6c908db9446cbc1aa23670a22974b402af37
- SSDEEP
  
  768:2qk1ATx+Bw24Tp7VDiMidNCiZW0HI8Jj2ECFcsm0IXWhCFAmmv1p4ODMtFA6cVxF:2KHDiMiZdIdECZpZDMtFbcDOXtnn10d
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2