socgholish | 4f3580c960440ac5a20e4e00fb0d8082bdcc95825a49fe53626057d21ee4dcce | Triage

Sharing

General

Target

JaffaCakes118_5238d85b5dd24583b0994e6c9ff29d48
Size

76KB
Sample

250115-kpwryaxnay
MD5

5238d85b5dd24583b0994e6c9ff29d48
SHA1

f64751c71aa303744f94071d2ec0c73ddb8e10f1
SHA256

4f3580c960440ac5a20e4e00fb0d8082bdcc95825a49fe53626057d21ee4dcce
SHA512

d727bb1d3754cd1e1de3168f378cc845254b772c060dc46776247689a8cda3a1d1d34f656e4f56d866f608c01e932b6e58a17d6eec733376198f78da4aaf7890
SSDEEP

768:KwP3PkUoTxh3t/OmC0f13bI0Idww+TXop/j4IUm0/Mq8xLIE2ItDcoF:13PkUoPtRB7wWX0/j4cLIE2IyoF

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_5238d85b5dd24583b0994e6c9ff29d48
- Size
  
  76KB
- MD5
  
  5238d85b5dd24583b0994e6c9ff29d48
- SHA1
  
  f64751c71aa303744f94071d2ec0c73ddb8e10f1
- SHA256
  
  4f3580c960440ac5a20e4e00fb0d8082bdcc95825a49fe53626057d21ee4dcce
- SHA512
  
  d727bb1d3754cd1e1de3168f378cc845254b772c060dc46776247689a8cda3a1d1d34f656e4f56d866f608c01e932b6e58a17d6eec733376198f78da4aaf7890
- SSDEEP
  
  768:KwP3PkUoTxh3t/OmC0f13bI0Idww+TXop/j4IUm0/Mq8xLIE2ItDcoF:13PkUoPtRB7wWX0/j4cLIE2IyoF
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2