socgholish | 5bab141ac21e97efe53426fd2e41658404d153805cdc6d74d4ac2436eb439977 | Triage

Sharing

General

Target

ff5cae940738e03ba41d76a00e1ba9dc_JaffaCakes118
Size

125KB
Sample

241219-lppt3azkhl
MD5

ff5cae940738e03ba41d76a00e1ba9dc
SHA1

54934be3e39a77557e90cb688b3c1e494fd47573
SHA256

5bab141ac21e97efe53426fd2e41658404d153805cdc6d74d4ac2436eb439977
SHA512

94678f86898c60005610c4ea08e54021a5c689e5bfac0ed79c41e8b97e24fd5cfd22f92697401b67c86e84a0811b71eee9fbaef065188591c61c2a3d60fab31a
SSDEEP

3072:dUfCWDxYxQ2PDxYxC2T/Z1snoExHw7SefhENE/jzCqezU+3zO:dUf1DxYxQ2PDxYxC2T/ZNn5

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  ff5cae940738e03ba41d76a00e1ba9dc_JaffaCakes118
- Size
  
  125KB
- MD5
  
  ff5cae940738e03ba41d76a00e1ba9dc
- SHA1
  
  54934be3e39a77557e90cb688b3c1e494fd47573
- SHA256
  
  5bab141ac21e97efe53426fd2e41658404d153805cdc6d74d4ac2436eb439977
- SHA512
  
  94678f86898c60005610c4ea08e54021a5c689e5bfac0ed79c41e8b97e24fd5cfd22f92697401b67c86e84a0811b71eee9fbaef065188591c61c2a3d60fab31a
- SSDEEP
  
  3072:dUfCWDxYxQ2PDxYxC2T/Z1snoExHw7SefhENE/jzCqezU+3zO:dUf1DxYxQ2PDxYxC2T/ZNn5
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2