socgholish | 1e1b9ff6c1a4576e2f218106cc25f9921444f11398962bb3dd3ed051c3f38b3b | Triage

Sharing

General

Target

JaffaCakes118_75aeedc687898501f0c12697572f6f68
Size

179KB
Sample

250107-yd6pnaxmfj
MD5

75aeedc687898501f0c12697572f6f68
SHA1

1380e64ed4d336a3beecd348554a36e383df1ee2
SHA256

1e1b9ff6c1a4576e2f218106cc25f9921444f11398962bb3dd3ed051c3f38b3b
SHA512

62adc789e3fc1fa6f49ff18851a91f6ed147468dba9747e5d84e7ee6a424bb280b7d72ba4ea63431759a8df4d167fd81ab7ab21e3a3d1ef2bec1592aca492544
SSDEEP

3072:ExDNvG8rm/GXmNJUNBVTrQUe+EWp6LIB33cbbb/tY2FSngw1mNRm:yVXmNJc5

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_75aeedc687898501f0c12697572f6f68
- Size
  
  179KB
- MD5
  
  75aeedc687898501f0c12697572f6f68
- SHA1
  
  1380e64ed4d336a3beecd348554a36e383df1ee2
- SHA256
  
  1e1b9ff6c1a4576e2f218106cc25f9921444f11398962bb3dd3ed051c3f38b3b
- SHA512
  
  62adc789e3fc1fa6f49ff18851a91f6ed147468dba9747e5d84e7ee6a424bb280b7d72ba4ea63431759a8df4d167fd81ab7ab21e3a3d1ef2bec1592aca492544
- SSDEEP
  
  3072:ExDNvG8rm/GXmNJUNBVTrQUe+EWp6LIB33cbbb/tY2FSngw1mNRm:yVXmNJc5
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2