General

  • Target

    JaffaCakes118_20cbb8e45ceb82345844efc5c68d7bdc

  • Size

    228KB

  • Sample

    250223-n5nytaxrt3

  • MD5

    20cbb8e45ceb82345844efc5c68d7bdc

  • SHA1

    d587ebf4f2fde45c0af52805c67717d994aa2283

  • SHA256

    8e4fce07589be74fc9035e2599bcbe881c740a6d720c4e8212d2a809780f4bbc

  • SHA512

    e79cc87b01cf5b35bca93eaff3790988719aae72877ebed0cdbd5c32865fe12773e716e31cf7c0dcddbc863f5f94bc483be5a997e0207f83ae992ee01b3a6859

  • SSDEEP

    3072:lnw5lKseu3SqodohpVcqwmwqARwlq11MOnv8sF6OZ7+3Vy+2ZrNSh/MxY+Kj0MyO:lnwPKsF0Smu

Malware Config

Targets

    • Target

      JaffaCakes118_20cbb8e45ceb82345844efc5c68d7bdc

    • Size

      228KB

    • MD5

      20cbb8e45ceb82345844efc5c68d7bdc

    • SHA1

      d587ebf4f2fde45c0af52805c67717d994aa2283

    • SHA256

      8e4fce07589be74fc9035e2599bcbe881c740a6d720c4e8212d2a809780f4bbc

    • SHA512

      e79cc87b01cf5b35bca93eaff3790988719aae72877ebed0cdbd5c32865fe12773e716e31cf7c0dcddbc863f5f94bc483be5a997e0207f83ae992ee01b3a6859

    • SSDEEP

      3072:lnw5lKseu3SqodohpVcqwmwqARwlq11MOnv8sF6OZ7+3Vy+2ZrNSh/MxY+Kj0MyO:lnwPKsF0Smu

    • Detected google phishing page

    • SocGholish

      SocGholish is a JavaScript payload that downloads other malware.

    • Socgholish family

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks