socgholish | b2ebe1aae80711d5dac012ae9c7068d0a8f9be5e4c41f8b7b54dd3bb3e9617c4 | Triage

Sharing

General

Target

JaffaCakes118_128c35bdbefd081686b29c4f184e3867
Size

50KB
Sample

250221-pfq8basjfj
MD5

128c35bdbefd081686b29c4f184e3867
SHA1

71371b9519246bda2005f3acb4da87b7499cc88f
SHA256

b2ebe1aae80711d5dac012ae9c7068d0a8f9be5e4c41f8b7b54dd3bb3e9617c4
SHA512

18623cb93983ea0ce5ee4230f8972ec8af2b50805e1bd42097d13ca48ae6154ec2ca9e5bd29fc68560ffada0f05f72c5d7386b572c07e15818d53760c7967a5a
SSDEEP

768:ptq78neUsjfrp1ZPI8BF6PLvsBTItIOqAI9LwyvAyeUk67lPczcAttgT8:bqXhPI8B+LvsBTIApIy5PBczcAttg4

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_128c35bdbefd081686b29c4f184e3867
- Size
  
  50KB
- MD5
  
  128c35bdbefd081686b29c4f184e3867
- SHA1
  
  71371b9519246bda2005f3acb4da87b7499cc88f
- SHA256
  
  b2ebe1aae80711d5dac012ae9c7068d0a8f9be5e4c41f8b7b54dd3bb3e9617c4
- SHA512
  
  18623cb93983ea0ce5ee4230f8972ec8af2b50805e1bd42097d13ca48ae6154ec2ca9e5bd29fc68560ffada0f05f72c5d7386b572c07e15818d53760c7967a5a
- SSDEEP
  
  768:ptq78neUsjfrp1ZPI8BF6PLvsBTItIOqAI9LwyvAyeUk67lPczcAttgT8:bqXhPI8B+LvsBTIApIy5PBczcAttg4
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2