socgholish | b9aea4fa05a050454cdf2b78a1b79c16401f1e655a8d854f32478e292436ac3b | Triage

Sharing

General

Target

JaffaCakes118_6a9e95ba213b655795e437de999e1df0
Size

279KB
Sample

250103-gl353a1ret
MD5

6a9e95ba213b655795e437de999e1df0
SHA1

ac50bc21842ab3ce7a60490d57c5b6dedb986ee7
SHA256

b9aea4fa05a050454cdf2b78a1b79c16401f1e655a8d854f32478e292436ac3b
SHA512

4bed99ff0bcbc36ca31c3d2ccfe582a5d5c10a7c73cc6a6824b54b4f85486396b98b277d600424c7ba57da8d39023f8d5348b22c4055268bc7d3427514ef2b82
SSDEEP

3072:1sWv3od2hs559Wxd6wAk+ZbXtDoFVvvkPzVGScoLvxn4pMcC0q14uPG+hNBJZ8EE:UoG+qjRx+bNp

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_6a9e95ba213b655795e437de999e1df0
- Size
  
  279KB
- MD5
  
  6a9e95ba213b655795e437de999e1df0
- SHA1
  
  ac50bc21842ab3ce7a60490d57c5b6dedb986ee7
- SHA256
  
  b9aea4fa05a050454cdf2b78a1b79c16401f1e655a8d854f32478e292436ac3b
- SHA512
  
  4bed99ff0bcbc36ca31c3d2ccfe582a5d5c10a7c73cc6a6824b54b4f85486396b98b277d600424c7ba57da8d39023f8d5348b22c4055268bc7d3427514ef2b82
- SSDEEP
  
  3072:1sWv3od2hs559Wxd6wAk+ZbXtDoFVvvkPzVGScoLvxn4pMcC0q14uPG+hNBJZ8EE:UoG+qjRx+bNp
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2