socgholish | bd7cdf798dcbd48e437ac6b5f08c71c93fb5e638b2822dd97e04481c8f68a13b | Triage

Sharing

General

Target

c2c86d4f2a9a01a1e5691f044a5978ed_JaffaCakes118
Size

176KB
Sample

241204-qx6vrsskhl
MD5

c2c86d4f2a9a01a1e5691f044a5978ed
SHA1

e23147072026c9ef36c1e15b79b7dac2f66edb32
SHA256

bd7cdf798dcbd48e437ac6b5f08c71c93fb5e638b2822dd97e04481c8f68a13b
SHA512

4a67cfc8af024ce6c3c40cbb79101822d35b7c073a1c7036917688f12df740d7ca9de447a7683ed0357e161f45f1049290fcdd31896a5659289f979e4ef522bc
SSDEEP

3072:OqRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRS/HDmAmcpBb+z8s:HcjJ/jXmNRMBQ

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  c2c86d4f2a9a01a1e5691f044a5978ed_JaffaCakes118
- Size
  
  176KB
- MD5
  
  c2c86d4f2a9a01a1e5691f044a5978ed
- SHA1
  
  e23147072026c9ef36c1e15b79b7dac2f66edb32
- SHA256
  
  bd7cdf798dcbd48e437ac6b5f08c71c93fb5e638b2822dd97e04481c8f68a13b
- SHA512
  
  4a67cfc8af024ce6c3c40cbb79101822d35b7c073a1c7036917688f12df740d7ca9de447a7683ed0357e161f45f1049290fcdd31896a5659289f979e4ef522bc
- SSDEEP
  
  3072:OqRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRS/HDmAmcpBb+z8s:HcjJ/jXmNRMBQ
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2