socgholish | f917aec5f3a6dfbdd5f7187e94803ce2848e0947c9834f25a877058f45b1f8c7 | Triage

Sharing

General

Target

JaffaCakes118_6b25dfc73161633565af123cc7044db4
Size

107KB
Sample

250103-jj5xzsvjdv
MD5

6b25dfc73161633565af123cc7044db4
SHA1

f26540058d916d977245cc5ba15643491f08bd8b
SHA256

f917aec5f3a6dfbdd5f7187e94803ce2848e0947c9834f25a877058f45b1f8c7
SHA512

cc36e8b56403ebc105f1ff67750df931f18cd4894ed829ee2f3d52dbc4461b0750f6a9e674acf021ced6be8e0188282d709111f6af88e1306fe37629933ef560
SSDEEP

1536:HGYzl9KZV7VElwAMqmJ8pvPsRpn2N1fhW:HGYx9mROlwHqg81PGx2N1fhW

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_6b25dfc73161633565af123cc7044db4
- Size
  
  107KB
- MD5
  
  6b25dfc73161633565af123cc7044db4
- SHA1
  
  f26540058d916d977245cc5ba15643491f08bd8b
- SHA256
  
  f917aec5f3a6dfbdd5f7187e94803ce2848e0947c9834f25a877058f45b1f8c7
- SHA512
  
  cc36e8b56403ebc105f1ff67750df931f18cd4894ed829ee2f3d52dbc4461b0750f6a9e674acf021ced6be8e0188282d709111f6af88e1306fe37629933ef560
- SSDEEP
  
  1536:HGYzl9KZV7VElwAMqmJ8pvPsRpn2N1fhW:HGYx9mROlwHqg81PGx2N1fhW
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2