socgholish | 3503f713899a52f51b2adf8a16e3bcd88bd49e1cdca5a3d65a139f5febb85f6b | Triage

Sharing

General

Target

JaffaCakes118_21bcaac047bc4406132d63360aaedcc9
Size

133KB
Sample

250225-axf2cayls6
MD5

21bcaac047bc4406132d63360aaedcc9
SHA1

4b4834a93d65d8e695252aca5a3520767348ca7e
SHA256

3503f713899a52f51b2adf8a16e3bcd88bd49e1cdca5a3d65a139f5febb85f6b
SHA512

b2339971121917ee2260e5f8c0a706b747858e98c904fede66588f91cccc34f7e6bd82803f061bb59c5324449ad7b348bbbc5295876cbe4833d4843138cc8fec
SSDEEP

768:2tk1ATx+Bw24Tp7VROBg/ipt+CpC0/gAtnEktNYkmQBDCheNQzDXB9kCjclp06cD:27HROBcCpBgfktZ05jclpXcDOct1+C

Score

10^/10

socgholish discovery downloader phishing

Malware Config

Targets

- Target
  
  JaffaCakes118_21bcaac047bc4406132d63360aaedcc9
- Size
  
  133KB
- MD5
  
  21bcaac047bc4406132d63360aaedcc9
- SHA1
  
  4b4834a93d65d8e695252aca5a3520767348ca7e
- SHA256
  
  3503f713899a52f51b2adf8a16e3bcd88bd49e1cdca5a3d65a139f5febb85f6b
- SHA512
  
  b2339971121917ee2260e5f8c0a706b747858e98c904fede66588f91cccc34f7e6bd82803f061bb59c5324449ad7b348bbbc5295876cbe4833d4843138cc8fec
- SSDEEP
  
  768:2tk1ATx+Bw24Tp7VROBg/ipt+CpC0/gAtnEktNYkmQBDCheNQzDXB9kCjclp06cD:27HROBcCpBgfktZ05jclpXcDOct1+C
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2