socgholish | db8daf5f4c94450310915e4cfb7cd4082eddb6ba296286a2b35fb819f6dc17f1 | Triage

Sharing

General

Target

JaffaCakes118_d5b497423654959451670fb8c5a11f21
Size

135KB
Sample

250210-bnwacaxpal
MD5

d5b497423654959451670fb8c5a11f21
SHA1

9623cc16b216a9c582fbc11be2d8085b234dbf80
SHA256

db8daf5f4c94450310915e4cfb7cd4082eddb6ba296286a2b35fb819f6dc17f1
SHA512

55252846de14ec79ad8f6f7a9c04e21528f0855d32f64aab549f05d26a90ce0cbcc0f675417d7323faf6424879a5746578332330621cd40c75243df36e8107aa
SSDEEP

3072:GEDnfSnIoEV47JlDsBJ6MmngV4e6dFEwuZ:GEDnfSQCQZ

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_d5b497423654959451670fb8c5a11f21
- Size
  
  135KB
- MD5
  
  d5b497423654959451670fb8c5a11f21
- SHA1
  
  9623cc16b216a9c582fbc11be2d8085b234dbf80
- SHA256
  
  db8daf5f4c94450310915e4cfb7cd4082eddb6ba296286a2b35fb819f6dc17f1
- SHA512
  
  55252846de14ec79ad8f6f7a9c04e21528f0855d32f64aab549f05d26a90ce0cbcc0f675417d7323faf6424879a5746578332330621cd40c75243df36e8107aa
- SSDEEP
  
  3072:GEDnfSnIoEV47JlDsBJ6MmngV4e6dFEwuZ:GEDnfSQCQZ
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2