socgholish | 0f438f52c155284e775e11f923cd93d697b164f63cc94e873c9ddb6769fc0f3e | Triage

Sharing

General

Target

JaffaCakes118_db64225856c5ba92be87d4a5168ac3ec
Size

48KB
Sample

250210-pmkdca1rdl
MD5

db64225856c5ba92be87d4a5168ac3ec
SHA1

6f4763c6c3a4adfc26bf250f2f86f36ad12abdb4
SHA256

0f438f52c155284e775e11f923cd93d697b164f63cc94e873c9ddb6769fc0f3e
SHA512

ca65bb0b1fe27462392eb97048c0b6cbda6458f6effd4cb7bb9dc0290ffa4314ca0b5716e7d022cd6e00420af5e5a3a0552e22a8388d473b4fcb9ebf3348cfdd
SSDEEP

1536:ptUtUKuIMkUn2WwUAUUU0UY2B+UuUuUDUFU8QU5UU2UQU2UzU2UwUFUOU+UnUDU/:PUtUKuIpU21UAUUU0UY2B+UuUuUDUFUs

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_db64225856c5ba92be87d4a5168ac3ec
- Size
  
  48KB
- MD5
  
  db64225856c5ba92be87d4a5168ac3ec
- SHA1
  
  6f4763c6c3a4adfc26bf250f2f86f36ad12abdb4
- SHA256
  
  0f438f52c155284e775e11f923cd93d697b164f63cc94e873c9ddb6769fc0f3e
- SHA512
  
  ca65bb0b1fe27462392eb97048c0b6cbda6458f6effd4cb7bb9dc0290ffa4314ca0b5716e7d022cd6e00420af5e5a3a0552e22a8388d473b4fcb9ebf3348cfdd
- SSDEEP
  
  1536:ptUtUKuIMkUn2WwUAUUU0UY2B+UuUuUDUFU8QU5UU2UQU2UzU2UwUFUOU+UnUDU/:PUtUKuIpU21UAUUU0UY2B+UuUuUDUFUs
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2