socgholish | c79a07d512700a63dd985d7887e271b43a9b01c77e832ff4503523ae73e600a9 | Triage

Sharing

General

Target

cd6b6bfeda2d7c7ca6c68797b30b8b13_JaffaCakes118
Size

156KB
Sample

241206-rh3p8sxkcl
MD5

cd6b6bfeda2d7c7ca6c68797b30b8b13
SHA1

8eb21847a8e87ff90bd95a4c07b774b6f7d389fc
SHA256

c79a07d512700a63dd985d7887e271b43a9b01c77e832ff4503523ae73e600a9
SHA512

c6c35c012821cb0f2e63fe3bc398c9d9b0e2fd8f7602950865784de4a24bcfb3b3ae4a78e247ce67523fa86d4c1c785f57fd6ec363e1c1dacb19291f819766a0
SSDEEP

3072:ykclGsQSuMl6INGm6TH8R9qhzS8WhSjThp7iQWEhIRe+UFtuvgx5:ykclo7iQWEhISP

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  cd6b6bfeda2d7c7ca6c68797b30b8b13_JaffaCakes118
- Size
  
  156KB
- MD5
  
  cd6b6bfeda2d7c7ca6c68797b30b8b13
- SHA1
  
  8eb21847a8e87ff90bd95a4c07b774b6f7d389fc
- SHA256
  
  c79a07d512700a63dd985d7887e271b43a9b01c77e832ff4503523ae73e600a9
- SHA512
  
  c6c35c012821cb0f2e63fe3bc398c9d9b0e2fd8f7602950865784de4a24bcfb3b3ae4a78e247ce67523fa86d4c1c785f57fd6ec363e1c1dacb19291f819766a0
- SSDEEP
  
  3072:ykclGsQSuMl6INGm6TH8R9qhzS8WhSjThp7iQWEhIRe+UFtuvgx5:ykclo7iQWEhISP
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2