socgholish | acd42dd1419665b6c740ae0027fe48ef16cebc8fc47c7043b30bac1685c5f6e8 | Triage

Sharing

General

Target

JaffaCakes118_d29e4fbddc81430b493b963aea897c8a
Size

129KB
Sample

250209-xseztaznaw
MD5

d29e4fbddc81430b493b963aea897c8a
SHA1

223c8d5c099b5f1ffc9dd3f94a553303f042eece
SHA256

acd42dd1419665b6c740ae0027fe48ef16cebc8fc47c7043b30bac1685c5f6e8
SHA512

6a39296797d56f7f08d5f0cbd338699aea17eebde38d5d33c5ea3ad4a024a87032c72f98905b2ec232a22364240fafe9c35c7939d4911c7be07d91547c0f18ab
SSDEEP

768:2Bk1ATx+Bw24Tp7VYiX2idNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFA6cVP:2PHYiXGiZdIXE5F4ZDMtFbcDOataTg

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_d29e4fbddc81430b493b963aea897c8a
- Size
  
  129KB
- MD5
  
  d29e4fbddc81430b493b963aea897c8a
- SHA1
  
  223c8d5c099b5f1ffc9dd3f94a553303f042eece
- SHA256
  
  acd42dd1419665b6c740ae0027fe48ef16cebc8fc47c7043b30bac1685c5f6e8
- SHA512
  
  6a39296797d56f7f08d5f0cbd338699aea17eebde38d5d33c5ea3ad4a024a87032c72f98905b2ec232a22364240fafe9c35c7939d4911c7be07d91547c0f18ab
- SSDEEP
  
  768:2Bk1ATx+Bw24Tp7VYiX2idNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFA6cVP:2PHYiXGiZdIXE5F4ZDMtFbcDOataTg
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2