socgholish | 857cdb77a6b02ad302d84696fa9ecc1b1edd4677700c8aa42dff76e1b14eb3f9 | Triage

Sharing

General

Target

e14ae7ea476459712c8017d38c048e00_JaffaCakes118
Size

227KB
Sample

241211-nq1ztsvqel
MD5

e14ae7ea476459712c8017d38c048e00
SHA1

45a055b53016be2343c8f42a3a66c70e2b366bac
SHA256

857cdb77a6b02ad302d84696fa9ecc1b1edd4677700c8aa42dff76e1b14eb3f9
SHA512

840db6c44a594dd68278cc9d37e75f2011cf94974be1218d6565497367c55981c5c30455f7f5add8db6a77250959bb3d7e279551059c7883ff70e293ae12dd02
SSDEEP

6144:GrXmNRYh7Kt3fr1vFpnW0yICB66aPDV1MmP3qnc:kXmN+MXFR34c

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  e14ae7ea476459712c8017d38c048e00_JaffaCakes118
- Size
  
  227KB
- MD5
  
  e14ae7ea476459712c8017d38c048e00
- SHA1
  
  45a055b53016be2343c8f42a3a66c70e2b366bac
- SHA256
  
  857cdb77a6b02ad302d84696fa9ecc1b1edd4677700c8aa42dff76e1b14eb3f9
- SHA512
  
  840db6c44a594dd68278cc9d37e75f2011cf94974be1218d6565497367c55981c5c30455f7f5add8db6a77250959bb3d7e279551059c7883ff70e293ae12dd02
- SSDEEP
  
  6144:GrXmNRYh7Kt3fr1vFpnW0yICB66aPDV1MmP3qnc:kXmN+MXFR34c
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2