socgholish | a4adab7cf5459a859013000cb429a91ff5742e8b7c32542598687498c49ee48c | Triage

Sharing

General

Target

def7168d20c0ad5c39324a1ca2976285_JaffaCakes118
Size

30KB
Sample

241210-3hmjssvlgw
MD5

def7168d20c0ad5c39324a1ca2976285
SHA1

4ef9a2add533b7397cae9f319e7ddca25fa9f04c
SHA256

a4adab7cf5459a859013000cb429a91ff5742e8b7c32542598687498c49ee48c
SHA512

1cd02aa57b591d9823fb3e4de3d90a017c6ca435da48b53e3e383ca659588c221388c736fb2089c231757679b98c6058c8c72254b30f584beaa2b9cc7337dfd2
SSDEEP

768:SR1tSWxlA/2ULylXhcBk3l8U4zZxHKXrT:SR1tSWxlA/2UylXhcBk3l8U4zZxHK7T

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  def7168d20c0ad5c39324a1ca2976285_JaffaCakes118
- Size
  
  30KB
- MD5
  
  def7168d20c0ad5c39324a1ca2976285
- SHA1
  
  4ef9a2add533b7397cae9f319e7ddca25fa9f04c
- SHA256
  
  a4adab7cf5459a859013000cb429a91ff5742e8b7c32542598687498c49ee48c
- SHA512
  
  1cd02aa57b591d9823fb3e4de3d90a017c6ca435da48b53e3e383ca659588c221388c736fb2089c231757679b98c6058c8c72254b30f584beaa2b9cc7337dfd2
- SSDEEP
  
  768:SR1tSWxlA/2ULylXhcBk3l8U4zZxHKXrT:SR1tSWxlA/2UylXhcBk3l8U4zZxHK7T
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2