socgholish | e594138784abf1f134d592920819545325d237af0f1320455a431c99ac38de2a | Triage

Sharing

General

Target

e594138784abf1f134d592920819545325d237af0f1320455a431c99ac38de2aN
Size

127KB
Sample

250212-thqrsaymez
MD5

21e71a591d6075cd1774f789dc4770d0
SHA1

69fd32bd9891fc180fc3266d59513f460b06a298
SHA256

e594138784abf1f134d592920819545325d237af0f1320455a431c99ac38de2a
SHA512

40d9412222e396a375bb8645e30e28c4c9e30ead741a326f7be057ac9fbce8cff3915c895d4025ed49e8efddae8750b4173686b15be3985a50866d9932e2d942
SSDEEP

768:1pHl1Cnj/kx+Bw24Tp7pQ3gTnEmjnO6oa0/OPrSeRnwim8Qx8bWfMaYNTdVwXC5Z:1rM3gTnEmK6oJ/eR5ZWXC5DDmcDOxmVh

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  e594138784abf1f134d592920819545325d237af0f1320455a431c99ac38de2aN
- Size
  
  127KB
- MD5
  
  21e71a591d6075cd1774f789dc4770d0
- SHA1
  
  69fd32bd9891fc180fc3266d59513f460b06a298
- SHA256
  
  e594138784abf1f134d592920819545325d237af0f1320455a431c99ac38de2a
- SHA512
  
  40d9412222e396a375bb8645e30e28c4c9e30ead741a326f7be057ac9fbce8cff3915c895d4025ed49e8efddae8750b4173686b15be3985a50866d9932e2d942
- SSDEEP
  
  768:1pHl1Cnj/kx+Bw24Tp7pQ3gTnEmjnO6oa0/OPrSeRnwim8Qx8bWfMaYNTdVwXC5Z:1rM3gTnEmK6oJ/eR5ZWXC5DDmcDOxmVh
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2