socgholish | 181fea5a3295b97cc643d8b3eebfc7e94822b31d8901ca47b3522cf4476c9882 | Triage

Sharing

General

Target

e11b9d0aa8bcf79b015bc562c8e798c2_JaffaCakes118
Size

144KB
Sample

241211-mwczhszjbs
MD5

e11b9d0aa8bcf79b015bc562c8e798c2
SHA1

ee7ec66b4fd7b0721a4c601e6794e0979493204a
SHA256

181fea5a3295b97cc643d8b3eebfc7e94822b31d8901ca47b3522cf4476c9882
SHA512

c697b2271b93fb63b6fc12aa7392b32d08fc7a21d947c58779500f7a2036e2e528c4a8536f8dd2ebbeddc41762b2fdb75fd47f67e50193dd8c325df75f6c6075
SSDEEP

3072:472dpnhTV/cOWd6bJr6KGCUMvzM+FDCKs95q1+K3258uoUP+tOt5SphjpYGQvq:4Q9kOWgNr6Po5

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  e11b9d0aa8bcf79b015bc562c8e798c2_JaffaCakes118
- Size
  
  144KB
- MD5
  
  e11b9d0aa8bcf79b015bc562c8e798c2
- SHA1
  
  ee7ec66b4fd7b0721a4c601e6794e0979493204a
- SHA256
  
  181fea5a3295b97cc643d8b3eebfc7e94822b31d8901ca47b3522cf4476c9882
- SHA512
  
  c697b2271b93fb63b6fc12aa7392b32d08fc7a21d947c58779500f7a2036e2e528c4a8536f8dd2ebbeddc41762b2fdb75fd47f67e50193dd8c325df75f6c6075
- SSDEEP
  
  3072:472dpnhTV/cOWd6bJr6KGCUMvzM+FDCKs95q1+K3258uoUP+tOt5SphjpYGQvq:4Q9kOWgNr6Po5
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2