socgholish | dfd16e13a5d3e51e4d973a5b96b2c286fbcdafb4563b08622ef27b555aa35475 | Triage

Sharing

General

Target

JaffaCakes118_c33ad1f0c09c7dcfb22a98ccad41e4c7
Size

127KB
Sample

250208-p1ed9avrhz
MD5

c33ad1f0c09c7dcfb22a98ccad41e4c7
SHA1

1702a890ad2d9c9fb1958fa7ce96b1c1b0f76e3b
SHA256

dfd16e13a5d3e51e4d973a5b96b2c286fbcdafb4563b08622ef27b555aa35475
SHA512

f3420208a4a5427bef59c0b7b4fc59a2748168ef3fa67ad6c4f06eaa69853d888efd3cdb9ab65c3d4ad39a33a8a8d9f1a9e698a151accaad0499e4b840002ac5
SSDEEP

768:2pk1ATx+Bw24Tp7VD6giXhWcVI0Hoy57EUJ3uCmWDrODQPydd7rxq0pa7XE6cVxP:2HHD6ScVvo1UJdcFpa7XHcDOatWCt

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_c33ad1f0c09c7dcfb22a98ccad41e4c7
- Size
  
  127KB
- MD5
  
  c33ad1f0c09c7dcfb22a98ccad41e4c7
- SHA1
  
  1702a890ad2d9c9fb1958fa7ce96b1c1b0f76e3b
- SHA256
  
  dfd16e13a5d3e51e4d973a5b96b2c286fbcdafb4563b08622ef27b555aa35475
- SHA512
  
  f3420208a4a5427bef59c0b7b4fc59a2748168ef3fa67ad6c4f06eaa69853d888efd3cdb9ab65c3d4ad39a33a8a8d9f1a9e698a151accaad0499e4b840002ac5
- SSDEEP
  
  768:2pk1ATx+Bw24Tp7VD6giXhWcVI0Hoy57EUJ3uCmWDrODQPydd7rxq0pa7XE6cVxP:2HHD6ScVvo1UJdcFpa7XHcDOatWCt
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2