socgholish | 0fca5fedceba6f38063d13eb4b94c24f804fb90477010ec86d55419edd3161c4 | Triage

Sharing

General

Target

edf21d944cfc07df30af3b018b1991d0_JaffaCakes118
Size

148KB
Sample

241214-kmltysymaj
MD5

edf21d944cfc07df30af3b018b1991d0
SHA1

04469ebe86ea1d78831e895eeeca5e672e3669d6
SHA256

0fca5fedceba6f38063d13eb4b94c24f804fb90477010ec86d55419edd3161c4
SHA512

762542c39f4a53b4ce657f8e5a423f7b700527955c3505c1c38f6e372207295105e0b510b0e359a50e580fc45bd39219ddb9ed7224b405856860ced17548db14
SSDEEP

3072:dUP5RcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRS/nMXYya24xDG:dUPbcjJ/jXmNR3

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  edf21d944cfc07df30af3b018b1991d0_JaffaCakes118
- Size
  
  148KB
- MD5
  
  edf21d944cfc07df30af3b018b1991d0
- SHA1
  
  04469ebe86ea1d78831e895eeeca5e672e3669d6
- SHA256
  
  0fca5fedceba6f38063d13eb4b94c24f804fb90477010ec86d55419edd3161c4
- SHA512
  
  762542c39f4a53b4ce657f8e5a423f7b700527955c3505c1c38f6e372207295105e0b510b0e359a50e580fc45bd39219ddb9ed7224b405856860ced17548db14
- SSDEEP
  
  3072:dUP5RcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRS/nMXYya24xDG:dUPbcjJ/jXmNR3
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2