socgholish | b9b9260dbfd28862e68bdce09fff6d16734ba1493457fbb16753ec98257c2edc | Triage

Sharing

General

Target

JaffaCakes118_4f6a4e5c9a374aed4ff18c05d1a4082c
Size

178KB
Sample

250107-ft7yjsxpej
MD5

4f6a4e5c9a374aed4ff18c05d1a4082c
SHA1

5832057512c1d7bc3ac8c5228e7fa1f62768806f
SHA256

b9b9260dbfd28862e68bdce09fff6d16734ba1493457fbb16753ec98257c2edc
SHA512

7a85ffe67f0f863feaf3d0afec38c8a331d7b632192ccc772062fe44a79d73334af4252e301255cfe6fb54ff8f4134f64bb9a59646d802ecd7c29d81c1618056
SSDEEP

3072:8i2xDNvG8rm/GXmNJUNBVT7QUe+E/42pE6LIB43cbbb/tY2FEngw114RB:4VXmNJytF

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_4f6a4e5c9a374aed4ff18c05d1a4082c
- Size
  
  178KB
- MD5
  
  4f6a4e5c9a374aed4ff18c05d1a4082c
- SHA1
  
  5832057512c1d7bc3ac8c5228e7fa1f62768806f
- SHA256
  
  b9b9260dbfd28862e68bdce09fff6d16734ba1493457fbb16753ec98257c2edc
- SHA512
  
  7a85ffe67f0f863feaf3d0afec38c8a331d7b632192ccc772062fe44a79d73334af4252e301255cfe6fb54ff8f4134f64bb9a59646d802ecd7c29d81c1618056
- SSDEEP
  
  3072:8i2xDNvG8rm/GXmNJUNBVT7QUe+E/42pE6LIB43cbbb/tY2FEngw114RB:4VXmNJytF
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2