socgholish | 559077e08ff5acc3178c20116cc96b401ad5bf7c1cff0da4a6cc7b767b56846f | Triage

Sharing

General

Target

d91df6f397a32d33d5020562ebccc2e5_JaffaCakes118
Size

130KB
Sample

241209-ma5seatrgv
MD5

d91df6f397a32d33d5020562ebccc2e5
SHA1

3849a63189720f36c5f47d79b45bd2a70f4d6182
SHA256

559077e08ff5acc3178c20116cc96b401ad5bf7c1cff0da4a6cc7b767b56846f
SHA512

3439383daea51bb1e42f15539d52dfb978e64dac82de0380279add67b2c9b9d1c0da2d9d27ab2242efc847794e18ac3336871de8e178963ffc467d3221f858be
SSDEEP

768:2Ok1ATx+Bw24Tp7VDOeipt+CpC0/gAtnakyhYkmQEDCheNQGOXB9kCjclp06cVxe:2uHDO2CpBgNky9Z5jclpXcDOEtD83

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  d91df6f397a32d33d5020562ebccc2e5_JaffaCakes118
- Size
  
  130KB
- MD5
  
  d91df6f397a32d33d5020562ebccc2e5
- SHA1
  
  3849a63189720f36c5f47d79b45bd2a70f4d6182
- SHA256
  
  559077e08ff5acc3178c20116cc96b401ad5bf7c1cff0da4a6cc7b767b56846f
- SHA512
  
  3439383daea51bb1e42f15539d52dfb978e64dac82de0380279add67b2c9b9d1c0da2d9d27ab2242efc847794e18ac3336871de8e178963ffc467d3221f858be
- SSDEEP
  
  768:2Ok1ATx+Bw24Tp7VDOeipt+CpC0/gAtnakyhYkmQEDCheNQGOXB9kCjclp06cVxe:2uHDO2CpBgNky9Z5jclpXcDOEtD83
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2