socgholish | b9c9526f2b643647c9a8e099eb9b9301d6c62dd2ed9d68f9c188075a3eff1f8c | Triage

Sharing

General

Target

fd5fbdc4c483a1fea3db857e968a8c2f_JaffaCakes118
Size

48KB
Sample

241218-2e9dqavlax
MD5

fd5fbdc4c483a1fea3db857e968a8c2f
SHA1

973addf074077448ba0fa00d32266000e052c4ee
SHA256

b9c9526f2b643647c9a8e099eb9b9301d6c62dd2ed9d68f9c188075a3eff1f8c
SHA512

38d90fdbcb3312fd5b20718d675949701c5dee2c166d7d994455e3da6f0dae9f76c7750cb754a5a64d79eb207e4fb5406ce1d6e64c6b7777bc9670cfb57ffc50
SSDEEP

1536:ptUtUKuIMkUn2WwUAUUU0UY2B+UuUuUDUFU8QU5UU2UQU2UzU2UwUFUOU+UnUDUH:PUtUKuIpU21UAUUU0UY2B+UuUuUDUFU8

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  fd5fbdc4c483a1fea3db857e968a8c2f_JaffaCakes118
- Size
  
  48KB
- MD5
  
  fd5fbdc4c483a1fea3db857e968a8c2f
- SHA1
  
  973addf074077448ba0fa00d32266000e052c4ee
- SHA256
  
  b9c9526f2b643647c9a8e099eb9b9301d6c62dd2ed9d68f9c188075a3eff1f8c
- SHA512
  
  38d90fdbcb3312fd5b20718d675949701c5dee2c166d7d994455e3da6f0dae9f76c7750cb754a5a64d79eb207e4fb5406ce1d6e64c6b7777bc9670cfb57ffc50
- SSDEEP
  
  1536:ptUtUKuIMkUn2WwUAUUU0UY2B+UuUuUDUFU8QU5UU2UQU2UzU2UwUFUOU+UnUDUH:PUtUKuIpU21UAUUU0UY2B+UuUuUDUFU8
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2