socgholish | 87b298629dde8956ad8c78494b31c44b125b7f926b41d99c20312ea01df234b8 | Triage

Sharing

General

Target

db2609e628109833bb8956c805678909_JaffaCakes118
Size

61KB
Sample

241209-x2qsnsxrct
MD5

db2609e628109833bb8956c805678909
SHA1

356cdcadb310bcdb6c9c3c11c0e443f1ef033cfd
SHA256

87b298629dde8956ad8c78494b31c44b125b7f926b41d99c20312ea01df234b8
SHA512

487080b78455b937c0e682bb011a19fd03d20e5680493ad3f9387037687ca3d1fb57a154559857582f9550e1c2d46bd420d58b853e67d2f1264ed95cbcf20146
SSDEEP

1536:CGw4IDhqCOKyPedjFi4o/LzM+W3tyOSCP/qi9j0gQQaQ4WGjdBO9Ztss6:CcIbclgtyOSiTL4BjdBO9Ztss6

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  db2609e628109833bb8956c805678909_JaffaCakes118
- Size
  
  61KB
- MD5
  
  db2609e628109833bb8956c805678909
- SHA1
  
  356cdcadb310bcdb6c9c3c11c0e443f1ef033cfd
- SHA256
  
  87b298629dde8956ad8c78494b31c44b125b7f926b41d99c20312ea01df234b8
- SHA512
  
  487080b78455b937c0e682bb011a19fd03d20e5680493ad3f9387037687ca3d1fb57a154559857582f9550e1c2d46bd420d58b853e67d2f1264ed95cbcf20146
- SSDEEP
  
  1536:CGw4IDhqCOKyPedjFi4o/LzM+W3tyOSCP/qi9j0gQQaQ4WGjdBO9Ztss6:CcIbclgtyOSiTL4BjdBO9Ztss6
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2