socgholish | 0d58fdb6b555675ce03409e8342def510fa5a9bbbe3ebfc9942be8df9b10aeac | Triage

Sharing

General

Target

c78306aa524ba7f647315ba4a8fabd59_JaffaCakes118
Size

125KB
Sample

241205-nrs1lsspgs
MD5

c78306aa524ba7f647315ba4a8fabd59
SHA1

2c67e4eb3838d14cba088f7e0f72ea5dccf3e437
SHA256

0d58fdb6b555675ce03409e8342def510fa5a9bbbe3ebfc9942be8df9b10aeac
SHA512

228ee77de6a9e84c1db23dbab3bab59b84bad145411ed238d7f870c804824eb37c679c177c539588796bdb235ed0f9cbe68873cb032069c658fbd3453eab3cb6
SSDEEP

3072:dUxCWDxYxQ2PDxYxC2T/Z1sfoExH+ESefhENE/jzCqezSU3sO:dUx1DxYxQ2PDxYxC2T/ZQg

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  c78306aa524ba7f647315ba4a8fabd59_JaffaCakes118
- Size
  
  125KB
- MD5
  
  c78306aa524ba7f647315ba4a8fabd59
- SHA1
  
  2c67e4eb3838d14cba088f7e0f72ea5dccf3e437
- SHA256
  
  0d58fdb6b555675ce03409e8342def510fa5a9bbbe3ebfc9942be8df9b10aeac
- SHA512
  
  228ee77de6a9e84c1db23dbab3bab59b84bad145411ed238d7f870c804824eb37c679c177c539588796bdb235ed0f9cbe68873cb032069c658fbd3453eab3cb6
- SSDEEP
  
  3072:dUxCWDxYxQ2PDxYxC2T/Z1sfoExH+ESefhENE/jzCqezSU3sO:dUx1DxYxQ2PDxYxC2T/ZQg
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2