General

  • Target

    JaffaCakes118_d93a25c6d344569f76c14bc735a57999

  • Size

    116KB

  • Sample

    250120-cyaxtswrfv

  • MD5

    d93a25c6d344569f76c14bc735a57999

  • SHA1

    6b63feb612940ba21a38465bef232aac90795f4f

  • SHA256

    a610bb5410b570e96fea1adad35a4a75f05935e87b76995108437fdf4fdefd90

  • SHA512

    51491fc8102271cfe2e20b9253400515d2279c9cbf3def517255d9a365a2192c7ea872489179e7ba7bf137f1cd4cd93e57ccd917be3b4dee44ec51df410ccb8e

  • SSDEEP

    3072:wl6JnErYl58U+NisOZHvOod8hNBWwd/RNHTcjbS4h:wl6JZ+Qn

Malware Config

Targets

    • Target

      JaffaCakes118_d93a25c6d344569f76c14bc735a57999

    • Size

      116KB

    • MD5

      d93a25c6d344569f76c14bc735a57999

    • SHA1

      6b63feb612940ba21a38465bef232aac90795f4f

    • SHA256

      a610bb5410b570e96fea1adad35a4a75f05935e87b76995108437fdf4fdefd90

    • SHA512

      51491fc8102271cfe2e20b9253400515d2279c9cbf3def517255d9a365a2192c7ea872489179e7ba7bf137f1cd4cd93e57ccd917be3b4dee44ec51df410ccb8e

    • SSDEEP

      3072:wl6JnErYl58U+NisOZHvOod8hNBWwd/RNHTcjbS4h:wl6JZ+Qn

    • Detected google phishing page

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks