socgholish | 40430292e7557d6b1f5e15537a522db75e412ed152eae8e7c224bc82d34f4782 | Triage

Sharing

General

Target

JaffaCakes118_618ae5b3a6de470af560061f04b69c21
Size

112KB
Sample

250130-l3g2dazmel
MD5

618ae5b3a6de470af560061f04b69c21
SHA1

be6a2cd586199bda3a79d9077ce7af29e767777a
SHA256

40430292e7557d6b1f5e15537a522db75e412ed152eae8e7c224bc82d34f4782
SHA512

69f4c039188887de21f25edde0c0c107f64294af4aa40b9bb42c992776e68e31090f318d0dbc0564424a082fe575f9f536732a59b0227ace3c1ef2a1c57b75a6
SSDEEP

3072:CwClodVhmvqYodVh1tTUtRcnByu65CgjTldi6NqoDj/C6tMZOc0d:CuFUtRcnByu65CgjTldi6NqEj7j

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_618ae5b3a6de470af560061f04b69c21
- Size
  
  112KB
- MD5
  
  618ae5b3a6de470af560061f04b69c21
- SHA1
  
  be6a2cd586199bda3a79d9077ce7af29e767777a
- SHA256
  
  40430292e7557d6b1f5e15537a522db75e412ed152eae8e7c224bc82d34f4782
- SHA512
  
  69f4c039188887de21f25edde0c0c107f64294af4aa40b9bb42c992776e68e31090f318d0dbc0564424a082fe575f9f536732a59b0227ace3c1ef2a1c57b75a6
- SSDEEP
  
  3072:CwClodVhmvqYodVh1tTUtRcnByu65CgjTldi6NqoDj/C6tMZOc0d:CuFUtRcnByu65CgjTldi6NqEj7j
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2