General

  • Target

    JaffaCakes118_71b77844de7870cf411337012069d259

  • Size

    108KB

  • Sample

    250107-wrsc3stphk

  • MD5

    71b77844de7870cf411337012069d259

  • SHA1

    6f073c8e381fee82d99fc0c9036c5cea88081dd6

  • SHA256

    a5a9d27f1e95c6844b4223a67acb2466e86b8909c3b1790d19e88a32eef03757

  • SHA512

    0e0675292fb1576925fc90be50c63ead9e47c5554d38a165a1920d32abe63a31d56a25bda9a64a945f01b16d1a3b71148d52de817199d7067b6945440a1af147

  • SSDEEP

    1536:1EFwEziTFtnBQ7/ur1jypgby9ZeUwWbURQDBf79pq1RTBGxFh5P2S:C/0Fc7/urlWbURQrs19BGfh5PV

Malware Config

Targets

    • Target

      JaffaCakes118_71b77844de7870cf411337012069d259

    • Size

      108KB

    • MD5

      71b77844de7870cf411337012069d259

    • SHA1

      6f073c8e381fee82d99fc0c9036c5cea88081dd6

    • SHA256

      a5a9d27f1e95c6844b4223a67acb2466e86b8909c3b1790d19e88a32eef03757

    • SHA512

      0e0675292fb1576925fc90be50c63ead9e47c5554d38a165a1920d32abe63a31d56a25bda9a64a945f01b16d1a3b71148d52de817199d7067b6945440a1af147

    • SSDEEP

      1536:1EFwEziTFtnBQ7/ur1jypgby9ZeUwWbURQDBf79pq1RTBGxFh5P2S:C/0Fc7/urlWbURQrs19BGfh5PV

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks