socgholish | a82f7008be0e15cb292da5c46dfb20f6e46ae27a6f40514bc6ee71e43b0a532f | Triage

Sharing

General

Target

JaffaCakes118_d8b1c8e51eff4d612b6235565ebcfc71
Size

130KB
Sample

250210-h3pvfavkdx
MD5

d8b1c8e51eff4d612b6235565ebcfc71
SHA1

84d3df97f0ca89223d7716ecc09e82cba6b9f412
SHA256

a82f7008be0e15cb292da5c46dfb20f6e46ae27a6f40514bc6ee71e43b0a532f
SHA512

778e17b0a4c36811ac3b20d37c743133618ea733f4632e8c997dbef9e06a19eb42dea154992bb7b50ae0187ecd2f68c2cfdbb8038ebe15476ca0eb20a5e22b8f
SSDEEP

768:25k1ATx+Bw24Tp7VHis2NLidNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFA68:23HHi9TiZdIXE5F4ZDMtFbcDOatQjtg

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_d8b1c8e51eff4d612b6235565ebcfc71
- Size
  
  130KB
- MD5
  
  d8b1c8e51eff4d612b6235565ebcfc71
- SHA1
  
  84d3df97f0ca89223d7716ecc09e82cba6b9f412
- SHA256
  
  a82f7008be0e15cb292da5c46dfb20f6e46ae27a6f40514bc6ee71e43b0a532f
- SHA512
  
  778e17b0a4c36811ac3b20d37c743133618ea733f4632e8c997dbef9e06a19eb42dea154992bb7b50ae0187ecd2f68c2cfdbb8038ebe15476ca0eb20a5e22b8f
- SSDEEP
  
  768:25k1ATx+Bw24Tp7VHis2NLidNCiZW0HI8JjoE5Jcsm09XWhCFAfDv1p4ODMtFA68:23HHi9TiZdIXE5F4ZDMtFbcDOatQjtg
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2