socgholish | cba0abc5ba0ab27d42f833eb1d356768c656c848ea8d50585df508fde60fb793 | Triage

Sharing

General

Target

JaffaCakes118_f240252413fd1974ad42b378ef91d8e6
Size

180KB
Sample

250111-arw6davmby
MD5

f240252413fd1974ad42b378ef91d8e6
SHA1

a3575aed16b5002bf9469311b0877118b8f4ca23
SHA256

cba0abc5ba0ab27d42f833eb1d356768c656c848ea8d50585df508fde60fb793
SHA512

507a09aafa8a8ab5fabd72c89cc4dcef872a15bcd7af886317b2fcf523b7f3c3721e74ee317db86c282ce219b3f703cffb314fd69fd63324a3e5337274a8fe4c
SSDEEP

3072:wLNWKurqDakvWyeArnirxCCF/3kwIba9Jr:wLN3akvNnrniBd3

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_f240252413fd1974ad42b378ef91d8e6
- Size
  
  180KB
- MD5
  
  f240252413fd1974ad42b378ef91d8e6
- SHA1
  
  a3575aed16b5002bf9469311b0877118b8f4ca23
- SHA256
  
  cba0abc5ba0ab27d42f833eb1d356768c656c848ea8d50585df508fde60fb793
- SHA512
  
  507a09aafa8a8ab5fabd72c89cc4dcef872a15bcd7af886317b2fcf523b7f3c3721e74ee317db86c282ce219b3f703cffb314fd69fd63324a3e5337274a8fe4c
- SSDEEP
  
  3072:wLNWKurqDakvWyeArnirxCCF/3kwIba9Jr:wLN3akvNnrniBd3
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2