socgholish | 6afeddf1d8cbf802ba0f20f7ddb0930ad29efc06b6fc57fe5dc42da4100f5687 | Triage

Sharing

General

Target

JaffaCakes118_d79d1e38dc0d565e75450801d6ed488a
Size

42KB
Sample

250120-bel1bavjbl
MD5

d79d1e38dc0d565e75450801d6ed488a
SHA1

fa8a048bfb2fa67a44250feb71d850fd632770fb
SHA256

6afeddf1d8cbf802ba0f20f7ddb0930ad29efc06b6fc57fe5dc42da4100f5687
SHA512

663b94a09229bada2b7688c85d397f7bb2200271acd25729e0fdaa814eead4e0cee64976b3e36bfdb01d9df42a0df2e5bf1136e046f6b7b887dd7b39230ba051
SSDEEP

768:S0gtkkiPv61pves/oES6PQ/jBzR70UW9dkc:SEkK61pv3/oES6PyjBV70Umkc

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_d79d1e38dc0d565e75450801d6ed488a
- Size
  
  42KB
- MD5
  
  d79d1e38dc0d565e75450801d6ed488a
- SHA1
  
  fa8a048bfb2fa67a44250feb71d850fd632770fb
- SHA256
  
  6afeddf1d8cbf802ba0f20f7ddb0930ad29efc06b6fc57fe5dc42da4100f5687
- SHA512
  
  663b94a09229bada2b7688c85d397f7bb2200271acd25729e0fdaa814eead4e0cee64976b3e36bfdb01d9df42a0df2e5bf1136e046f6b7b887dd7b39230ba051
- SSDEEP
  
  768:S0gtkkiPv61pves/oES6PQ/jBzR70UW9dkc:SEkK61pv3/oES6PyjBV70Umkc
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2