socgholish | acfe5760392c97e37350970d03a3722b60b557c2940b392bfaf5e4ae79aeed13 | Triage

Sharing

General

Target

JaffaCakes118_5bea50dc6b054ba7b1d6fd2347ea2381
Size

185KB
Sample

250107-ltjtlswjgv
MD5

5bea50dc6b054ba7b1d6fd2347ea2381
SHA1

14cc114581fec2fe70eac0304052cab3baa1f69b
SHA256

acfe5760392c97e37350970d03a3722b60b557c2940b392bfaf5e4ae79aeed13
SHA512

7c4739c466dbfb702e83ec1e962f6e31db86f6eb3c4d86ca8b978ddff2568374e4744addb8bfd5f75a873c0baf49b8f9038e2a84e86b894caaf1ee53b321a9d9
SSDEEP

3072:dxDNvG8rm/GXmNJUNBVT7QUe+ElDCRa6LIBY5cbbb/tY2Fangw1/TRl:pVXmNJXDCKU

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_5bea50dc6b054ba7b1d6fd2347ea2381
- Size
  
  185KB
- MD5
  
  5bea50dc6b054ba7b1d6fd2347ea2381
- SHA1
  
  14cc114581fec2fe70eac0304052cab3baa1f69b
- SHA256
  
  acfe5760392c97e37350970d03a3722b60b557c2940b392bfaf5e4ae79aeed13
- SHA512
  
  7c4739c466dbfb702e83ec1e962f6e31db86f6eb3c4d86ca8b978ddff2568374e4744addb8bfd5f75a873c0baf49b8f9038e2a84e86b894caaf1ee53b321a9d9
- SSDEEP
  
  3072:dxDNvG8rm/GXmNJUNBVT7QUe+ElDCRa6LIBY5cbbb/tY2Fangw1/TRl:pVXmNJXDCKU
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2