socgholish | f87db58400241d5dd3b4ad4fe230de47a9df3e3671dc9e8d0cf0e6511d55f84a | Triage

Sharing

General

Target

efe5a4a84733025905ce792818777853_JaffaCakes118
Size

282KB
Sample

241214-v2sk6a1khn
MD5

efe5a4a84733025905ce792818777853
SHA1

29a1b42674c1ca6b9965ca42e2cafe86af40a2fd
SHA256

f87db58400241d5dd3b4ad4fe230de47a9df3e3671dc9e8d0cf0e6511d55f84a
SHA512

441263159aa793f9a4ebdac3796646c6cbf22096b457c6422b9230aab40bd7ec6e188b20aaec7eb447e52f6704df88dcff303d02bc4f65a33b9fdef53e420cf3
SSDEEP

3072:OZW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgTu3VY7RJvfy3dCd8L:rDAXmNR8/LP

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  efe5a4a84733025905ce792818777853_JaffaCakes118
- Size
  
  282KB
- MD5
  
  efe5a4a84733025905ce792818777853
- SHA1
  
  29a1b42674c1ca6b9965ca42e2cafe86af40a2fd
- SHA256
  
  f87db58400241d5dd3b4ad4fe230de47a9df3e3671dc9e8d0cf0e6511d55f84a
- SHA512
  
  441263159aa793f9a4ebdac3796646c6cbf22096b457c6422b9230aab40bd7ec6e188b20aaec7eb447e52f6704df88dcff303d02bc4f65a33b9fdef53e420cf3
- SSDEEP
  
  3072:OZW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgTu3VY7RJvfy3dCd8L:rDAXmNR8/LP
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2