socgholish | 0df5d1ec52a2f9ab56434e07a9322e8021c6c8bcdf5968581a93924a947cbed7 | Triage

Sharing

General

Target

JaffaCakes118_cf41f5f5bbb5526a8bb0a8dfd7e525ba
Size

129KB
Sample

250209-pk4zzazphj
MD5

cf41f5f5bbb5526a8bb0a8dfd7e525ba
SHA1

f16cea2fecb48dcb27d337b88b16934a7fd0dabd
SHA256

0df5d1ec52a2f9ab56434e07a9322e8021c6c8bcdf5968581a93924a947cbed7
SHA512

75ea21d6b393f9cdb65c83efad09bde00b2fab5300be48e530026a83f3d098d18cf4e62e9e2d0bf96c641233d03050b4ea122ef3813b3e00115a2a26d1db7b90
SSDEEP

768:bPCJEXyCdEE6Sl0saC2OaH9wufDnDD9BVZfkHHjKEklnpfF7wsG+w+iyV:bKJECCdEE4CkLnDD9BVZfkjqf5w4w+i4

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_cf41f5f5bbb5526a8bb0a8dfd7e525ba
- Size
  
  129KB
- MD5
  
  cf41f5f5bbb5526a8bb0a8dfd7e525ba
- SHA1
  
  f16cea2fecb48dcb27d337b88b16934a7fd0dabd
- SHA256
  
  0df5d1ec52a2f9ab56434e07a9322e8021c6c8bcdf5968581a93924a947cbed7
- SHA512
  
  75ea21d6b393f9cdb65c83efad09bde00b2fab5300be48e530026a83f3d098d18cf4e62e9e2d0bf96c641233d03050b4ea122ef3813b3e00115a2a26d1db7b90
- SSDEEP
  
  768:bPCJEXyCdEE6Sl0saC2OaH9wufDnDD9BVZfkHHjKEklnpfF7wsG+w+iyV:bKJECCdEE4CkLnDD9BVZfkjqf5w4w+i4
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2