socgholish | 803a3f7d4783a4e061c839786ec88be7203c8e62b8891f4e6a811a762f808303 | Triage

Sharing

General

Target

fe6b30b502163697e92aabf74cb73395_JaffaCakes118
Size

55KB
Sample

241219-ezl3laxqat
MD5

fe6b30b502163697e92aabf74cb73395
SHA1

b9ebe1445dfc2b26db3515960879ced1bcca8709
SHA256

803a3f7d4783a4e061c839786ec88be7203c8e62b8891f4e6a811a762f808303
SHA512

046ac198e0d809ba9be0df8d56bb062c6717f0e79088707b88c335762fdba4b7001000f132ce2d075c45702ddcb3db500b3d01828b2d8351562768ed1b5d4ee7
SSDEEP

768:GN5OvEFFxevZXieBcW3eI61ZOpz7xVAL/:GN5OvEFFxevZXieuiSKt7xVAL/

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  fe6b30b502163697e92aabf74cb73395_JaffaCakes118
- Size
  
  55KB
- MD5
  
  fe6b30b502163697e92aabf74cb73395
- SHA1
  
  b9ebe1445dfc2b26db3515960879ced1bcca8709
- SHA256
  
  803a3f7d4783a4e061c839786ec88be7203c8e62b8891f4e6a811a762f808303
- SHA512
  
  046ac198e0d809ba9be0df8d56bb062c6717f0e79088707b88c335762fdba4b7001000f132ce2d075c45702ddcb3db500b3d01828b2d8351562768ed1b5d4ee7
- SSDEEP
  
  768:GN5OvEFFxevZXieBcW3eI61ZOpz7xVAL/:GN5OvEFFxevZXieuiSKt7xVAL/
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2