socgholish | 13364d7e48111142f9f16fc54204dbabe46fbdef0c1ecfe65a6ce519ca67b1fc | Triage

Sharing

General

Target

JaffaCakes118_5180b429552f5410eb79864ceb8a17a7
Size

119KB
Sample

250129-cfgyesxmaw
MD5

5180b429552f5410eb79864ceb8a17a7
SHA1

e22ce32a613e805a28b08a9bcbcaa33df4279ca7
SHA256

13364d7e48111142f9f16fc54204dbabe46fbdef0c1ecfe65a6ce519ca67b1fc
SHA512

0ace963783db2ed63d2dec1be476364d5c8c3401c592d71f767e86c353d5b61a721756410c98a618091e01576e9eff8940f24f0b529f3ed517e6ac11fe4e1f65
SSDEEP

1536:4kJEEJXFvRkCDrnDD9BVZfkj/f5w4w+iT:4mJX1RkCDrnfVZfT

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_5180b429552f5410eb79864ceb8a17a7
- Size
  
  119KB
- MD5
  
  5180b429552f5410eb79864ceb8a17a7
- SHA1
  
  e22ce32a613e805a28b08a9bcbcaa33df4279ca7
- SHA256
  
  13364d7e48111142f9f16fc54204dbabe46fbdef0c1ecfe65a6ce519ca67b1fc
- SHA512
  
  0ace963783db2ed63d2dec1be476364d5c8c3401c592d71f767e86c353d5b61a721756410c98a618091e01576e9eff8940f24f0b529f3ed517e6ac11fe4e1f65
- SSDEEP
  
  1536:4kJEEJXFvRkCDrnDD9BVZfkj/f5w4w+iT:4mJX1RkCDrnfVZfT
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2