socgholish | 441da42811494a323f7b0d241e3d08dd2358f3ccaef670f9d70d8b8976f692e4 | Triage

Sharing

General

Target

JaffaCakes118_49423663230338a37a453eaa7b678150
Size

244KB
Sample

250101-gd742synhr
MD5

49423663230338a37a453eaa7b678150
SHA1

2a0e1d5ff6636e538ab54ba6a8137ccface24e30
SHA256

441da42811494a323f7b0d241e3d08dd2358f3ccaef670f9d70d8b8976f692e4
SHA512

036a99f91f89e57242985da35bd365469ca8635002092bcb283e5f32a4188d8022ffaf78a5ad09dc9fdd0221242873e6879fd72c2870b142d44720a7382ea653
SSDEEP

3072:cq7eCQ2ohVEUcjvG8rMUwWxhPduagP5KUaRBVouj+oVB+xISmQBVOJEHytsH+2O:cq7eCQ2ohV8eoVB6Wt

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_49423663230338a37a453eaa7b678150
- Size
  
  244KB
- MD5
  
  49423663230338a37a453eaa7b678150
- SHA1
  
  2a0e1d5ff6636e538ab54ba6a8137ccface24e30
- SHA256
  
  441da42811494a323f7b0d241e3d08dd2358f3ccaef670f9d70d8b8976f692e4
- SHA512
  
  036a99f91f89e57242985da35bd365469ca8635002092bcb283e5f32a4188d8022ffaf78a5ad09dc9fdd0221242873e6879fd72c2870b142d44720a7382ea653
- SSDEEP
  
  3072:cq7eCQ2ohVEUcjvG8rMUwWxhPduagP5KUaRBVouj+oVB+xISmQBVOJEHytsH+2O:cq7eCQ2ohV8eoVB6Wt
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2