socgholish | d1630a6bc96fa7187895ad0473138289303d2bcf3cb9525a59dd774e33c4f2b2 | Triage

Sharing

General

Target

JaffaCakes118_f9419454b2cdf2fa5e44ecc2601ec9ca
Size

141KB
Sample

250214-smdsca1qgn
MD5

f9419454b2cdf2fa5e44ecc2601ec9ca
SHA1

f33d42ca24666120de90b6fa370733d267eb710b
SHA256

d1630a6bc96fa7187895ad0473138289303d2bcf3cb9525a59dd774e33c4f2b2
SHA512

597f17510c4e45330d615e58f184dbe67b0786801e634ae8caebf3ed951f3643c291b4cda141baf0ddc71cef7c2774a055e7357e682cb3ce1e17d422792165cf
SSDEEP

3072:CpolodIhWvc+odIhbGONaq7ljB46z1q5FFxmiOkqsFZ1fv9d5ckE/Ggb9C6tMlHE:CP1N5ljB46z1q5FFxmiOkqsFZ1fv9d5u

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_f9419454b2cdf2fa5e44ecc2601ec9ca
- Size
  
  141KB
- MD5
  
  f9419454b2cdf2fa5e44ecc2601ec9ca
- SHA1
  
  f33d42ca24666120de90b6fa370733d267eb710b
- SHA256
  
  d1630a6bc96fa7187895ad0473138289303d2bcf3cb9525a59dd774e33c4f2b2
- SHA512
  
  597f17510c4e45330d615e58f184dbe67b0786801e634ae8caebf3ed951f3643c291b4cda141baf0ddc71cef7c2774a055e7357e682cb3ce1e17d422792165cf
- SSDEEP
  
  3072:CpolodIhWvc+odIhbGONaq7ljB46z1q5FFxmiOkqsFZ1fv9d5ckE/Ggb9C6tMlHE:CP1N5ljB46z1q5FFxmiOkqsFZ1fv9d5u
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2