socgholish | 1dca10c3505da5a9b42b440f229066951e4cc97a971746bd1074ee2db4e23658 | Triage

Sharing

General

Target

dad9bd0e5a7979723c3a0e306f4e68ce_JaffaCakes118
Size

282KB
Sample

241209-wl52zswlcz
MD5

dad9bd0e5a7979723c3a0e306f4e68ce
SHA1

a27cd43a53bbf5ce4cba62c0661abbdfa229624a
SHA256

1dca10c3505da5a9b42b440f229066951e4cc97a971746bd1074ee2db4e23658
SHA512

6d23e54817ce507f32a022b555e503ace4d17dd9151d77fda43ae1a633bb42d7e1ea6b3b4faceabec60a25ad2762698b1145dab5a6753e0af262fa28b8357526
SSDEEP

3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgU73VY7RJvfy3dpA3a:CDAXmNR8/VX

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  dad9bd0e5a7979723c3a0e306f4e68ce_JaffaCakes118
- Size
  
  282KB
- MD5
  
  dad9bd0e5a7979723c3a0e306f4e68ce
- SHA1
  
  a27cd43a53bbf5ce4cba62c0661abbdfa229624a
- SHA256
  
  1dca10c3505da5a9b42b440f229066951e4cc97a971746bd1074ee2db4e23658
- SHA512
  
  6d23e54817ce507f32a022b555e503ace4d17dd9151d77fda43ae1a633bb42d7e1ea6b3b4faceabec60a25ad2762698b1145dab5a6753e0af262fa28b8357526
- SSDEEP
  
  3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgU73VY7RJvfy3dpA3a:CDAXmNR8/VX
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2