socgholish | 01554794840f02091174b9b44ed91684d30da00b650e3700902221de32a99233 | Triage

Sharing

General

Target

ca0696fd771b62850fa7211fabafff98_JaffaCakes118
Size

281KB
Sample

241205-31stjavpem
MD5

ca0696fd771b62850fa7211fabafff98
SHA1

a9c6f204d82bc579e1c923422b7db8d834153a2f
SHA256

01554794840f02091174b9b44ed91684d30da00b650e3700902221de32a99233
SHA512

f7f74573ffec9f08244c5fe92cc1ad4a6603a9fdc5f042f623d78f9c76298c86ef8cd413f30a2032e49ef592916d3e72118fd609e39a99c99b74f3fa7798e042
SSDEEP

3072:OjW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgTu3VY7RJvfy3dYd0z:nDAXmNR8/Xt

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  ca0696fd771b62850fa7211fabafff98_JaffaCakes118
- Size
  
  281KB
- MD5
  
  ca0696fd771b62850fa7211fabafff98
- SHA1
  
  a9c6f204d82bc579e1c923422b7db8d834153a2f
- SHA256
  
  01554794840f02091174b9b44ed91684d30da00b650e3700902221de32a99233
- SHA512
  
  f7f74573ffec9f08244c5fe92cc1ad4a6603a9fdc5f042f623d78f9c76298c86ef8cd413f30a2032e49ef592916d3e72118fd609e39a99c99b74f3fa7798e042
- SSDEEP
  
  3072:OjW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgTu3VY7RJvfy3dYd0z:nDAXmNR8/Xt
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2