socgholish | eb3cd99a57c8047d091191d8daf8501181928c5fa90ceb02de8b74c8634d7fe5 | Triage

Sharing

General

Target

JaffaCakes118_fc98378b1c13600055068ad489142da0
Size

66KB
Sample

250215-1aw26avnhm
MD5

fc98378b1c13600055068ad489142da0
SHA1

3e162f9eff690d1feaf51d0b69418f0af847be1e
SHA256

eb3cd99a57c8047d091191d8daf8501181928c5fa90ceb02de8b74c8634d7fe5
SHA512

579c8a642d2f99dae0edc33eef5f119ca5d36994b9a4cd887d9db76dafc15021eb4262275dbf319ca1dc7388ddd05d10c0f345f3e903d6a9969fa5c982ab1a92
SSDEEP

1536:qKUXpi9SdCmAlItC7NFzqJ9nAK6M1Zfx1/rtslGZ4A:qBXpi9Sd7ANFzWAK71AlGH

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_fc98378b1c13600055068ad489142da0
- Size
  
  66KB
- MD5
  
  fc98378b1c13600055068ad489142da0
- SHA1
  
  3e162f9eff690d1feaf51d0b69418f0af847be1e
- SHA256
  
  eb3cd99a57c8047d091191d8daf8501181928c5fa90ceb02de8b74c8634d7fe5
- SHA512
  
  579c8a642d2f99dae0edc33eef5f119ca5d36994b9a4cd887d9db76dafc15021eb4262275dbf319ca1dc7388ddd05d10c0f345f3e903d6a9969fa5c982ab1a92
- SSDEEP
  
  1536:qKUXpi9SdCmAlItC7NFzqJ9nAK6M1Zfx1/rtslGZ4A:qBXpi9Sd7ANFzWAK71AlGH
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Downloads MZ/PE file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2