socgholish | 16db0d83238aae409f2202e5fbecce4404fd4e74fc48eb52fb2b127e8170be8e | Triage

Sharing

General

Target

JaffaCakes118_0e2dd507a0bd136245c5dc04f9ac918e
Size

150KB
Sample

250220-zwhk8avlax
MD5

0e2dd507a0bd136245c5dc04f9ac918e
SHA1

823db2354ac049de3b0b43116e47155922734621
SHA256

16db0d83238aae409f2202e5fbecce4404fd4e74fc48eb52fb2b127e8170be8e
SHA512

40544f5220d7062820b62923286cfbe050e339b2eaf4e2c830725d0f8b3efbbc80609cf091bf6c8d898f1b9db4e9afa088fd6ec3c814cb7cbda7e0b9701fd2a8
SSDEEP

3072:zeHEaVHs8Xd52WGpQEodehUsjhyBjBHUy:zeHEaVHs8z2zs

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_0e2dd507a0bd136245c5dc04f9ac918e
- Size
  
  150KB
- MD5
  
  0e2dd507a0bd136245c5dc04f9ac918e
- SHA1
  
  823db2354ac049de3b0b43116e47155922734621
- SHA256
  
  16db0d83238aae409f2202e5fbecce4404fd4e74fc48eb52fb2b127e8170be8e
- SHA512
  
  40544f5220d7062820b62923286cfbe050e339b2eaf4e2c830725d0f8b3efbbc80609cf091bf6c8d898f1b9db4e9afa088fd6ec3c814cb7cbda7e0b9701fd2a8
- SSDEEP
  
  3072:zeHEaVHs8Xd52WGpQEodehUsjhyBjBHUy:zeHEaVHs8z2zs
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2