socgholish | 0a79b8a17034b6e3b5a64ca8672ad9f557d5882b8a88b8035fd6a6bdf1b3b80b | Triage

Sharing

General

Target

JaffaCakes118_4d25e8c251c9d7e2903937992f003f5f
Size

84KB
Sample

250101-jt365s1rgp
MD5

4d25e8c251c9d7e2903937992f003f5f
SHA1

b6a73d3d6398dca6bafec9b0cc6a964b008032f7
SHA256

0a79b8a17034b6e3b5a64ca8672ad9f557d5882b8a88b8035fd6a6bdf1b3b80b
SHA512

7aae420b5ab8f2c663546fe0e939d8c3832ead08684c45130792eeaeafb6e6edbe26540ba6c03b7850747586f30ccac7a2a0bfa168b7818019076a33ff3327b3
SSDEEP

1536:+KWV/PfG01vS9enyI6JgRDvLB8wE+ZLsh:qu009eH6Hh+ZLsh

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_4d25e8c251c9d7e2903937992f003f5f
- Size
  
  84KB
- MD5
  
  4d25e8c251c9d7e2903937992f003f5f
- SHA1
  
  b6a73d3d6398dca6bafec9b0cc6a964b008032f7
- SHA256
  
  0a79b8a17034b6e3b5a64ca8672ad9f557d5882b8a88b8035fd6a6bdf1b3b80b
- SHA512
  
  7aae420b5ab8f2c663546fe0e939d8c3832ead08684c45130792eeaeafb6e6edbe26540ba6c03b7850747586f30ccac7a2a0bfa168b7818019076a33ff3327b3
- SSDEEP
  
  1536:+KWV/PfG01vS9enyI6JgRDvLB8wE+ZLsh:qu009eH6Hh+ZLsh
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2