socgholish | 112eeed01f5576855c0ca6b83ba82df2c249a8b60cdf6beaf62350c10762968f | Triage

Sharing

General

Target

JaffaCakes118_c5ae0fb9513e19d630a5db92b968e34c
Size

43KB
Sample

250208-wdqmbsxjgy
MD5

c5ae0fb9513e19d630a5db92b968e34c
SHA1

192560f5884f0d46d23660d26696de4ba7f88d23
SHA256

112eeed01f5576855c0ca6b83ba82df2c249a8b60cdf6beaf62350c10762968f
SHA512

6aadc43ee6e92d508d3e8d2e914351d95613671609c4d2491e8ffe4b54b9e5c31bbe5993ddbd21af50503aee40cb1e411bd40ccbf860d8278cdb8fb13d45d392
SSDEEP

768:ADHUtUKuIMkUn2sjwUK8oUUU0UY2BQQpTU4QkDUqQ2UrQeDUpQkUJQPQU1QAUUQw:AzUtUKuIMkUn2iwUaUUU0UY2BPUuUuUW

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_c5ae0fb9513e19d630a5db92b968e34c
- Size
  
  43KB
- MD5
  
  c5ae0fb9513e19d630a5db92b968e34c
- SHA1
  
  192560f5884f0d46d23660d26696de4ba7f88d23
- SHA256
  
  112eeed01f5576855c0ca6b83ba82df2c249a8b60cdf6beaf62350c10762968f
- SHA512
  
  6aadc43ee6e92d508d3e8d2e914351d95613671609c4d2491e8ffe4b54b9e5c31bbe5993ddbd21af50503aee40cb1e411bd40ccbf860d8278cdb8fb13d45d392
- SSDEEP
  
  768:ADHUtUKuIMkUn2sjwUK8oUUU0UY2BQQpTU4QkDUqQ2UrQeDUpQkUJQPQU1QAUUQw:AzUtUKuIMkUn2iwUaUUU0UY2BPUuUuUW
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2