socgholish | 28c4fa2b1a418f6d418fb791c46d75e6109ec15f2d91441783010bdda52bfebf | Triage

Sharing

General

Target

JaffaCakes118_931e63d1f32483957480208f1449cf64
Size

220KB
Sample

250108-jcas9ssler
MD5

931e63d1f32483957480208f1449cf64
SHA1

bd91ef08757f289be4e6dfd27932304078033435
SHA256

28c4fa2b1a418f6d418fb791c46d75e6109ec15f2d91441783010bdda52bfebf
SHA512

097b5952d2a06c8cbb799c095d35b330d612a140cf34a18c8552326444d235fb57a99b9780bc64638ff64f5d6affa30e9255c4ee4d5074d57de78e632e00c07b
SSDEEP

6144:I+RELVzhXkA3d8VZQvzwV2lms5JBpknvjXGXgcH26GzKQB:rRELVzhXkAN8VZQLfh5JBpknvjXGXgcM

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_931e63d1f32483957480208f1449cf64
- Size
  
  220KB
- MD5
  
  931e63d1f32483957480208f1449cf64
- SHA1
  
  bd91ef08757f289be4e6dfd27932304078033435
- SHA256
  
  28c4fa2b1a418f6d418fb791c46d75e6109ec15f2d91441783010bdda52bfebf
- SHA512
  
  097b5952d2a06c8cbb799c095d35b330d612a140cf34a18c8552326444d235fb57a99b9780bc64638ff64f5d6affa30e9255c4ee4d5074d57de78e632e00c07b
- SSDEEP
  
  6144:I+RELVzhXkA3d8VZQvzwV2lms5JBpknvjXGXgcH26GzKQB:rRELVzhXkAN8VZQLfh5JBpknvjXGXgcM
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2