socgholish | 4c14486c63308995ac6d216ae5b62854866b7024b37f7580d1fba78c5eb98196 | Triage

Sharing

General

Target

c05b99c11736f802277ed36a8fa9d356_JaffaCakes118
Size

462KB
Sample

241204-crtflawqcv
MD5

c05b99c11736f802277ed36a8fa9d356
SHA1

a279bd5aad4f9079f86ce4760fc8faf6369c705c
SHA256

4c14486c63308995ac6d216ae5b62854866b7024b37f7580d1fba78c5eb98196
SHA512

557b317109ed08615971798a17c137bb510c7bb106b9d6c6007c1432cf730e71943ed6ece182af7acfb635fb159825c6f46a300b9d26780f28abf5f7b3255009
SSDEEP

3072:ObW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGElumsV3Qa+W2GtKgnxCm2UB:bDAXmNR8/Rms9QadKgnxCmhApQ

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  c05b99c11736f802277ed36a8fa9d356_JaffaCakes118
- Size
  
  462KB
- MD5
  
  c05b99c11736f802277ed36a8fa9d356
- SHA1
  
  a279bd5aad4f9079f86ce4760fc8faf6369c705c
- SHA256
  
  4c14486c63308995ac6d216ae5b62854866b7024b37f7580d1fba78c5eb98196
- SHA512
  
  557b317109ed08615971798a17c137bb510c7bb106b9d6c6007c1432cf730e71943ed6ece182af7acfb635fb159825c6f46a300b9d26780f28abf5f7b3255009
- SSDEEP
  
  3072:ObW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGElumsV3Qa+W2GtKgnxCm2UB:bDAXmNR8/Rms9QadKgnxCmhApQ
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2