socgholish | 85daafd7d7ac9261894a50b0a9961950640fa48a71158b9be4bd314828c9119e | Triage

Sharing

General

Target

deda139f91498e36ccd8297dc46b3697_JaffaCakes118
Size

281KB
Sample

241210-2w5f4atlds
MD5

deda139f91498e36ccd8297dc46b3697
SHA1

7ec9690c35e09dd9fecda0759af372f7768e7991
SHA256

85daafd7d7ac9261894a50b0a9961950640fa48a71158b9be4bd314828c9119e
SHA512

aa6c8138f15807d0a3418bdbc6c82491e1a488f9eabf6a564b4240ea7d29813d9ede5ba25cd025f168f32583c63e5b2179abd9576c61e76d45788179cda76292
SSDEEP

3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgMz3VY7RJvfy3di45C:EDAXmNR8/Ha

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  deda139f91498e36ccd8297dc46b3697_JaffaCakes118
- Size
  
  281KB
- MD5
  
  deda139f91498e36ccd8297dc46b3697
- SHA1
  
  7ec9690c35e09dd9fecda0759af372f7768e7991
- SHA256
  
  85daafd7d7ac9261894a50b0a9961950640fa48a71158b9be4bd314828c9119e
- SHA512
  
  aa6c8138f15807d0a3418bdbc6c82491e1a488f9eabf6a564b4240ea7d29813d9ede5ba25cd025f168f32583c63e5b2179abd9576c61e76d45788179cda76292
- SSDEEP
  
  3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgMz3VY7RJvfy3di45C:EDAXmNR8/Ha
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2