socgholish | 3f54f5d8d317d8685bcf045a8bbcfb6fc2980c7056529350951938e73df60c77 | Triage

Sharing

General

Target

JaffaCakes118_515800ec99fce2a28db293cd3f96a471
Size

64KB
Sample

250107-gm5ehsxmat
MD5

515800ec99fce2a28db293cd3f96a471
SHA1

4ec586b43270941c7b5356082b7655363873c87e
SHA256

3f54f5d8d317d8685bcf045a8bbcfb6fc2980c7056529350951938e73df60c77
SHA512

c5b950defd1cd06dd5fda4fb1ebccc64905e2c5c66ac3969cf211ebca53463c6cc3f01c3192bcb77c476e01195b2a916a9f1457a23e7dc27caf5d0bc26c350b7
SSDEEP

1536:NMk5hP2zB8h/P7PYt+rr89rCX7CesY8seZbtx5D:NX5NyBwn7PYMrw9rCX7CeiseZbtrD

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_515800ec99fce2a28db293cd3f96a471
- Size
  
  64KB
- MD5
  
  515800ec99fce2a28db293cd3f96a471
- SHA1
  
  4ec586b43270941c7b5356082b7655363873c87e
- SHA256
  
  3f54f5d8d317d8685bcf045a8bbcfb6fc2980c7056529350951938e73df60c77
- SHA512
  
  c5b950defd1cd06dd5fda4fb1ebccc64905e2c5c66ac3969cf211ebca53463c6cc3f01c3192bcb77c476e01195b2a916a9f1457a23e7dc27caf5d0bc26c350b7
- SSDEEP
  
  1536:NMk5hP2zB8h/P7PYt+rr89rCX7CesY8seZbtx5D:NX5NyBwn7PYMrw9rCX7CeiseZbtrD
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2