socgholish | 4d7d4e4364e00149ef2b96336488d25bcd2b21b7db9ff4c201553be90ed56157 | Triage

Sharing

General

Target

JaffaCakes118_363e83a90a006dd0b9aae25c1a85ee58
Size

207KB
Sample

250126-rknzvstlcx
MD5

363e83a90a006dd0b9aae25c1a85ee58
SHA1

059025a5c176d080eb1f26cb1bfb68ef66ffae77
SHA256

4d7d4e4364e00149ef2b96336488d25bcd2b21b7db9ff4c201553be90ed56157
SHA512

c5367462e7d72aab0ca948e989851abb966851d68b9894f65f9d9b26398cff111f89431b5f74f82dcc054682e9484737fe8e5a37ee454cb4274335fdae653a54
SSDEEP

3072:C5Olodoh2v+Oodoh7xZEYYa6v2Dm1G0rrGEV3ZHUPMC6tMbyc1d:CTbHYa6vGm1GyGEV3ZHUAg

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_363e83a90a006dd0b9aae25c1a85ee58
- Size
  
  207KB
- MD5
  
  363e83a90a006dd0b9aae25c1a85ee58
- SHA1
  
  059025a5c176d080eb1f26cb1bfb68ef66ffae77
- SHA256
  
  4d7d4e4364e00149ef2b96336488d25bcd2b21b7db9ff4c201553be90ed56157
- SHA512
  
  c5367462e7d72aab0ca948e989851abb966851d68b9894f65f9d9b26398cff111f89431b5f74f82dcc054682e9484737fe8e5a37ee454cb4274335fdae653a54
- SSDEEP
  
  3072:C5Olodoh2v+Oodoh7xZEYYa6v2Dm1G0rrGEV3ZHUPMC6tMbyc1d:CTbHYa6vGm1GyGEV3ZHUAg
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2