Resubmissions

26-12-2024 19:37

241226-ybv55swney 10

26-12-2024 19:36

241226-yba5zawncv 10

18-12-2024 18:09

241218-wrt7nsxrgk 10

General

  • Target

    fc988a1c324b0af00f493c21161369a4_JaffaCakes118

  • Size

    151KB

  • Sample

    241226-yba5zawncv

  • MD5

    fc988a1c324b0af00f493c21161369a4

  • SHA1

    7e5aaa432dfc8f6567a2eca85925de62be9a4ef0

  • SHA256

    b1dd3d861fbb8edc28adc7f23238901a1ff392da25cf3913a3eb4718ff14de3e

  • SHA512

    51bf4a012b048a4c60b01b55166cf0dc0aa3915becb60e32730eebb1b5338235dfed45516a4dde87ed5b9f1e37da9d7b20406620e670333bc93de06f94ba889b

  • SSDEEP

    3072:cwFJ6/15vmVbzt8aN3tQq22xEPKbcBc0cIuchy:cwFJnXt8aN3tdF

Malware Config

Targets

    • Target

      fc988a1c324b0af00f493c21161369a4_JaffaCakes118

    • Size

      151KB

    • MD5

      fc988a1c324b0af00f493c21161369a4

    • SHA1

      7e5aaa432dfc8f6567a2eca85925de62be9a4ef0

    • SHA256

      b1dd3d861fbb8edc28adc7f23238901a1ff392da25cf3913a3eb4718ff14de3e

    • SHA512

      51bf4a012b048a4c60b01b55166cf0dc0aa3915becb60e32730eebb1b5338235dfed45516a4dde87ed5b9f1e37da9d7b20406620e670333bc93de06f94ba889b

    • SSDEEP

      3072:cwFJ6/15vmVbzt8aN3tQq22xEPKbcBc0cIuchy:cwFJnXt8aN3tdF

    • Detected google phishing page

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks