socgholish | 35ef2e7dd824e918f680110f69901f3b6e66c6dfd3834ae874e71ffe0bf790a2 | Triage

Sharing

General

Target

c7b33f0062b584fb8baff43012204f82_JaffaCakes118
Size

277KB
Sample

241205-pnlmsszrfn
MD5

c7b33f0062b584fb8baff43012204f82
SHA1

8e5a3b5fc03e12095f6fbecf85984b1de21ad570
SHA256

35ef2e7dd824e918f680110f69901f3b6e66c6dfd3834ae874e71ffe0bf790a2
SHA512

9cd2d557ab515d04650a0d87603c428052f1f3dcf67f57282946e8031d36eb79901af62427b04f67338fd85e18e3ffbf55106c18d45f4bd7a32415711669f799
SSDEEP

3072:cuzrxTm+76i4xVR2yH1ouYqE2fZLqSE6MrkPuKbj:cuzrEqA

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  c7b33f0062b584fb8baff43012204f82_JaffaCakes118
- Size
  
  277KB
- MD5
  
  c7b33f0062b584fb8baff43012204f82
- SHA1
  
  8e5a3b5fc03e12095f6fbecf85984b1de21ad570
- SHA256
  
  35ef2e7dd824e918f680110f69901f3b6e66c6dfd3834ae874e71ffe0bf790a2
- SHA512
  
  9cd2d557ab515d04650a0d87603c428052f1f3dcf67f57282946e8031d36eb79901af62427b04f67338fd85e18e3ffbf55106c18d45f4bd7a32415711669f799
- SSDEEP
  
  3072:cuzrxTm+76i4xVR2yH1ouYqE2fZLqSE6MrkPuKbj:cuzrEqA
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2