socgholish | da087db56e6c885026140efeb04b61e52c01952ae6894b270d160a85225022d2 | Triage

Sharing

General

Target

JaffaCakes118_4a87a9dec2791d5cb0717999b0cea03b
Size

200KB
Sample

250101-g8dtpazmak
MD5

4a87a9dec2791d5cb0717999b0cea03b
SHA1

eb76361d8d747ba0a3a9e7918898c6dbe1fc47ce
SHA256

da087db56e6c885026140efeb04b61e52c01952ae6894b270d160a85225022d2
SHA512

18458cc133a4b62c910d965e695ca7bc3d7c0bc4756861be88297c300379a335a2e65fe0c602cc9eeb70b5b23042ffa36a14f0962eadf4afd147f2fc9f4be439
SSDEEP

3072:mJzF5qbXt+zSJmFslTw7pHkgT9dEyUF8lnls:mJimCmY

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_4a87a9dec2791d5cb0717999b0cea03b
- Size
  
  200KB
- MD5
  
  4a87a9dec2791d5cb0717999b0cea03b
- SHA1
  
  eb76361d8d747ba0a3a9e7918898c6dbe1fc47ce
- SHA256
  
  da087db56e6c885026140efeb04b61e52c01952ae6894b270d160a85225022d2
- SHA512
  
  18458cc133a4b62c910d965e695ca7bc3d7c0bc4756861be88297c300379a335a2e65fe0c602cc9eeb70b5b23042ffa36a14f0962eadf4afd147f2fc9f4be439
- SSDEEP
  
  3072:mJzF5qbXt+zSJmFslTw7pHkgT9dEyUF8lnls:mJimCmY
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2