socgholish | ccf3b26c5558a31b6ac8c97e783a788f0fb09ca18bb53101723f63bd8b088fd2 | Triage

Sharing

General

Target

JaffaCakes118_36f989a95ac43b869bb63ccf842c9ebe
Size

130KB
Sample

250126-tb4p3awrhp
MD5

36f989a95ac43b869bb63ccf842c9ebe
SHA1

dd1067cacddd207aaffab8b721013fef3d3047e8
SHA256

ccf3b26c5558a31b6ac8c97e783a788f0fb09ca18bb53101723f63bd8b088fd2
SHA512

4beedffc4d59f0135374e5bcd7324e0e072dad80c7371ed0ebf91643e50704df44c858e1b4ccbdf4aa545b085ae15965f62c2d29c6e144dfde99077fff77c3fd
SSDEEP

768:2Jnk1ATx+Bw24Tp7rEi08B2JNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFAmT:2JZ5Ei08XiZdIXE5F4ZDMtF7cDO3DTd

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_36f989a95ac43b869bb63ccf842c9ebe
- Size
  
  130KB
- MD5
  
  36f989a95ac43b869bb63ccf842c9ebe
- SHA1
  
  dd1067cacddd207aaffab8b721013fef3d3047e8
- SHA256
  
  ccf3b26c5558a31b6ac8c97e783a788f0fb09ca18bb53101723f63bd8b088fd2
- SHA512
  
  4beedffc4d59f0135374e5bcd7324e0e072dad80c7371ed0ebf91643e50704df44c858e1b4ccbdf4aa545b085ae15965f62c2d29c6e144dfde99077fff77c3fd
- SSDEEP
  
  768:2Jnk1ATx+Bw24Tp7rEi08B2JNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFAmT:2JZ5Ei08XiZdIXE5F4ZDMtF7cDO3DTd
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2