socgholish | aad777bd48959a32361bd6547bfff1ebe2172cbd804f1e28f89f7f4fccc4b590 | Triage

Sharing

General

Target

JaffaCakes118_70e4b1e4b06e7a4ed36c491fa131dddf
Size

343KB
Sample

250116-kh5q9sspgl
MD5

70e4b1e4b06e7a4ed36c491fa131dddf
SHA1

3da27490894f2c5cc35a509f87f5b33cb6691a42
SHA256

aad777bd48959a32361bd6547bfff1ebe2172cbd804f1e28f89f7f4fccc4b590
SHA512

40d63313fb5b0fa91c9c233e3179c72836e883b4fb0ca243f2bc17a0825f85b738ea5113b820d6882eee88c3410714194025881d17df9373a9679bcb57485ac9
SSDEEP

3072:npWKJ4FBAXodohyIagxwj85odohMF8+sPk+Yeatc5KSnmNdKoBwKPxRodoh8+6Z1:nptJAIagSj8n+cv

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_70e4b1e4b06e7a4ed36c491fa131dddf
- Size
  
  343KB
- MD5
  
  70e4b1e4b06e7a4ed36c491fa131dddf
- SHA1
  
  3da27490894f2c5cc35a509f87f5b33cb6691a42
- SHA256
  
  aad777bd48959a32361bd6547bfff1ebe2172cbd804f1e28f89f7f4fccc4b590
- SHA512
  
  40d63313fb5b0fa91c9c233e3179c72836e883b4fb0ca243f2bc17a0825f85b738ea5113b820d6882eee88c3410714194025881d17df9373a9679bcb57485ac9
- SSDEEP
  
  3072:npWKJ4FBAXodohyIagxwj85odohMF8+sPk+Yeatc5KSnmNdKoBwKPxRodoh8+6Z1:nptJAIagSj8n+cv
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2