socgholish | 54ba531c73ff8354ac3210df3530c23ebdcce6d9d6ffb16c8db1122660558ea9 | Triage

Sharing

General

Target

JaffaCakes118_679d8ce7792be839484944cb6c952f8b
Size

55KB
Sample

250107-rklvhawnfk
MD5

679d8ce7792be839484944cb6c952f8b
SHA1

11d9ea061949931caff652c1a5218043863659a7
SHA256

54ba531c73ff8354ac3210df3530c23ebdcce6d9d6ffb16c8db1122660558ea9
SHA512

95caf8269d9782f2eb91244cb238d52bbf69412cc321f8ce29a99b68e216b800e05645669f1fc758aa8abd0ecbbd8e7dd7dea676098689669096a9b264927054
SSDEEP

768:JqyP+oS1RhvkO98CEjPwmdV9YPseKxH0Fax3/20R3UvdtV:JqbJ1RVkO98NbwmdEFax3fUdtV

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_679d8ce7792be839484944cb6c952f8b
- Size
  
  55KB
- MD5
  
  679d8ce7792be839484944cb6c952f8b
- SHA1
  
  11d9ea061949931caff652c1a5218043863659a7
- SHA256
  
  54ba531c73ff8354ac3210df3530c23ebdcce6d9d6ffb16c8db1122660558ea9
- SHA512
  
  95caf8269d9782f2eb91244cb238d52bbf69412cc321f8ce29a99b68e216b800e05645669f1fc758aa8abd0ecbbd8e7dd7dea676098689669096a9b264927054
- SSDEEP
  
  768:JqyP+oS1RhvkO98CEjPwmdV9YPseKxH0Fax3/20R3UvdtV:JqbJ1RVkO98NbwmdEFax3fUdtV
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2