socgholish | cf76e46ed3f16d07ae4e7f5b1a6db554b55d5fee732af4f0947804f18903152d | Triage

Sharing

General

Target

JaffaCakes118_686966d6bc41289ead6cc1a4ca1ee3e4
Size

155KB
Sample

250131-kd1xhszrht
MD5

686966d6bc41289ead6cc1a4ca1ee3e4
SHA1

629f63b48f528caf19398e354d84083a120d5db9
SHA256

cf76e46ed3f16d07ae4e7f5b1a6db554b55d5fee732af4f0947804f18903152d
SHA512

be363306652310e93ee7e42fb71dbc4a8265022423a6a7718340740720509281bb6c6b406bc39926dc550e9b1c2288f98cab45dddcf85202a3e4fac2e5756d76
SSDEEP

768:2Nk1ATx+Bw24Tp7VD6KBIuiThWcVI0Hoy57EUJ3uCmWDrODQPydd7rxq0pa7XE6E:2bHD6KBIocVvo1UJdcFpa7XHcDOati0b

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_686966d6bc41289ead6cc1a4ca1ee3e4
- Size
  
  155KB
- MD5
  
  686966d6bc41289ead6cc1a4ca1ee3e4
- SHA1
  
  629f63b48f528caf19398e354d84083a120d5db9
- SHA256
  
  cf76e46ed3f16d07ae4e7f5b1a6db554b55d5fee732af4f0947804f18903152d
- SHA512
  
  be363306652310e93ee7e42fb71dbc4a8265022423a6a7718340740720509281bb6c6b406bc39926dc550e9b1c2288f98cab45dddcf85202a3e4fac2e5756d76
- SSDEEP
  
  768:2Nk1ATx+Bw24Tp7VD6KBIuiThWcVI0Hoy57EUJ3uCmWDrODQPydd7rxq0pa7XE6E:2bHD6KBIocVvo1UJdcFpa7XHcDOati0b
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2