socgholish | c413e9130d29c32b75e2758bd841a3711ac2e88ea591d22dbb0a8a82e9a4958e | Triage

Sharing

General

Target

da08f5879d5321ddedd0a3ee7608103e_JaffaCakes118
Size

516KB
Sample

241209-rm7jzsvpfk
MD5

da08f5879d5321ddedd0a3ee7608103e
SHA1

f78cedd85501be3ff3bbc8a71c9a8712104734ce
SHA256

c413e9130d29c32b75e2758bd841a3711ac2e88ea591d22dbb0a8a82e9a4958e
SHA512

86b6c4350eebf13e85ba26b76261e9a84eeb5243d552c48647d936157a187f1750379fcf0dd1f69c70bede12f8f6c9cf839d31bc7cf704fbfde0a20a84e62299
SSDEEP

6144:3dofBJyHaxYfXF+1ymp1fLI0RrurEhgOmrYWH:oYfV+1xpvhgL

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  da08f5879d5321ddedd0a3ee7608103e_JaffaCakes118
- Size
  
  516KB
- MD5
  
  da08f5879d5321ddedd0a3ee7608103e
- SHA1
  
  f78cedd85501be3ff3bbc8a71c9a8712104734ce
- SHA256
  
  c413e9130d29c32b75e2758bd841a3711ac2e88ea591d22dbb0a8a82e9a4958e
- SHA512
  
  86b6c4350eebf13e85ba26b76261e9a84eeb5243d552c48647d936157a187f1750379fcf0dd1f69c70bede12f8f6c9cf839d31bc7cf704fbfde0a20a84e62299
- SSDEEP
  
  6144:3dofBJyHaxYfXF+1ymp1fLI0RrurEhgOmrYWH:oYfV+1xpvhgL
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2