socgholish | cf0459e0209b8d96d4a6ec959366b669c53cb81417ca5c40f478d7b650f752ad | Triage

Sharing

General

Target

d965a072fa01da319bc936df8068c712_JaffaCakes118
Size

127KB
Sample

241209-nmmb9s1jck
MD5

d965a072fa01da319bc936df8068c712
SHA1

8015929bf996700e05c71cd72f1be388382321de
SHA256

cf0459e0209b8d96d4a6ec959366b669c53cb81417ca5c40f478d7b650f752ad
SHA512

083f5a7f90775bf9ac7aea4ee6254d44f18d1e4f3eddfabcaa600d7c8dc8c86ae5b8ecf158de76fc122699884528d6bb885f418a3ac319b6b892e7aa3faf18b4
SSDEEP

768:2ok1ATx+Bw24Tp7VDiYidNCiZW0HI8Jj2ECFcsm0IXWhCFAmmv1p4ODMtFA6cVxi:20HDiQiZdIdECZpZDMtFbcDOEtv4R

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  d965a072fa01da319bc936df8068c712_JaffaCakes118
- Size
  
  127KB
- MD5
  
  d965a072fa01da319bc936df8068c712
- SHA1
  
  8015929bf996700e05c71cd72f1be388382321de
- SHA256
  
  cf0459e0209b8d96d4a6ec959366b669c53cb81417ca5c40f478d7b650f752ad
- SHA512
  
  083f5a7f90775bf9ac7aea4ee6254d44f18d1e4f3eddfabcaa600d7c8dc8c86ae5b8ecf158de76fc122699884528d6bb885f418a3ac319b6b892e7aa3faf18b4
- SSDEEP
  
  768:2ok1ATx+Bw24Tp7VDiYidNCiZW0HI8Jj2ECFcsm0IXWhCFAmmv1p4ODMtFA6cVxi:20HDiQiZdIdECZpZDMtFbcDOEtv4R
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2