socgholish

Resubmissions

26/12/2024, 19:37 UTC

241226-ybv55swney 10

26/12/2024, 19:36 UTC

241226-yba5zawncv 10

18/12/2024, 18:09 UTC

241218-wrt7nsxrgk 10

Sharing

Copy URL

Twitter E-mail

General

Target

fc988a1c324b0af00f493c21161369a4_JaffaCakes118
Size

151KB
Sample

241218-wrt7nsxrgk
MD5

fc988a1c324b0af00f493c21161369a4
SHA1

7e5aaa432dfc8f6567a2eca85925de62be9a4ef0
SHA256

b1dd3d861fbb8edc28adc7f23238901a1ff392da25cf3913a3eb4718ff14de3e
SHA512

51bf4a012b048a4c60b01b55166cf0dc0aa3915becb60e32730eebb1b5338235dfed45516a4dde87ed5b9f1e37da9d7b20406620e670333bc93de06f94ba889b
SSDEEP

3072:cwFJ6/15vmVbzt8aN3tQq22xEPKbcBc0cIuchy:cwFJnXt8aN3tdF

Score

10^/10

Malware Config

Targets

- Target
  
  fc988a1c324b0af00f493c21161369a4_JaffaCakes118
- Size
  
  151KB
- MD5
  
  fc988a1c324b0af00f493c21161369a4
- SHA1
  
  7e5aaa432dfc8f6567a2eca85925de62be9a4ef0
- SHA256
  
  b1dd3d861fbb8edc28adc7f23238901a1ff392da25cf3913a3eb4718ff14de3e
- SHA512
  
  51bf4a012b048a4c60b01b55166cf0dc0aa3915becb60e32730eebb1b5338235dfed45516a4dde87ed5b9f1e37da9d7b20406620e670333bc93de06f94ba889b
- SSDEEP
  
  3072:cwFJ6/15vmVbzt8aN3tQq22xEPKbcBc0cIuchy:cwFJnXt8aN3tdF
Score

10^/10

socgholish google discovery downloader phishing
- Detected google phishing page
  phishing google
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detected google phishing page

Socgholish family

Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.