socgholish | 81763f5e30c6e0be3492e3a9cb567a07ecc8324cbeae5c3d4bbc122bb8993758 | Triage

Sharing

General

Target

JaffaCakes118_29b936c7a4979e6e28e51932a8dcb17b
Size

178KB
Sample

241231-ve8nvszlby
MD5

29b936c7a4979e6e28e51932a8dcb17b
SHA1

96db8cf8b25047314ea55f485954e0b85662fb27
SHA256

81763f5e30c6e0be3492e3a9cb567a07ecc8324cbeae5c3d4bbc122bb8993758
SHA512

6a2b293dc33f927c5bee369ca97cad04fc0d866e4a08b154a36299731451c79b771176822e5cfa30f929f7957275a67dd8735599b47c81dd7cdd6ef0050914c0
SSDEEP

3072:RxDNvG8rm/GXmNJUNBVT7QUe+EOf56LIBg5cbbb/tY2Fqngw1/3Ru:tVXmNJI5v

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_29b936c7a4979e6e28e51932a8dcb17b
- Size
  
  178KB
- MD5
  
  29b936c7a4979e6e28e51932a8dcb17b
- SHA1
  
  96db8cf8b25047314ea55f485954e0b85662fb27
- SHA256
  
  81763f5e30c6e0be3492e3a9cb567a07ecc8324cbeae5c3d4bbc122bb8993758
- SHA512
  
  6a2b293dc33f927c5bee369ca97cad04fc0d866e4a08b154a36299731451c79b771176822e5cfa30f929f7957275a67dd8735599b47c81dd7cdd6ef0050914c0
- SSDEEP
  
  3072:RxDNvG8rm/GXmNJUNBVT7QUe+EOf56LIBg5cbbb/tY2Fqngw1/3Ru:tVXmNJI5v
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2