socgholish | 4129ffaf17e3a40fea01a7c34891eec5ae99967b8bb25697254b9945275f0d07 | Triage

Sharing

General

Target

bf941c8e518e3e2e6249301d0825878a_JaffaCakes118
Size

281KB
Sample

241203-2nx22stnan
MD5

bf941c8e518e3e2e6249301d0825878a
SHA1

1a328646a7756b62f91cb8496e2975e8c319c733
SHA256

4129ffaf17e3a40fea01a7c34891eec5ae99967b8bb25697254b9945275f0d07
SHA512

c07df329de7ecbdf8c38559439cecc75b377ee378910dc48b5909bf969fbf7ab2d3118bd893970fa143f34c38d83ff7e7219c239558b62e4c0ec51f94280d1ae
SSDEEP

3072:OkW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgIP3VY7RJvfy3d3kR2:IDAXmNR8/nL

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  bf941c8e518e3e2e6249301d0825878a_JaffaCakes118
- Size
  
  281KB
- MD5
  
  bf941c8e518e3e2e6249301d0825878a
- SHA1
  
  1a328646a7756b62f91cb8496e2975e8c319c733
- SHA256
  
  4129ffaf17e3a40fea01a7c34891eec5ae99967b8bb25697254b9945275f0d07
- SHA512
  
  c07df329de7ecbdf8c38559439cecc75b377ee378910dc48b5909bf969fbf7ab2d3118bd893970fa143f34c38d83ff7e7219c239558b62e4c0ec51f94280d1ae
- SSDEEP
  
  3072:OkW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgIP3VY7RJvfy3d3kR2:IDAXmNR8/nL
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2