socgholish | dcdefb2ddc542c7d0d41f0cd684aec970b5769d9b3da7ee0ad69e907a3b45a7b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

JaffaCakes...d.html

windows7-x64

JaffaCakes...d.html

windows10-2004-x64

6

Sharing

General

Target

JaffaCakes118_5ea0da32fc24b454b7f66942ae5bce3d
Size

211KB
Sample

250310-mlrpxs1zdt
MD5

5ea0da32fc24b454b7f66942ae5bce3d
SHA1

8a9bb2c09a82898c6db58e86b47d3d757ccc84b4
SHA256

dcdefb2ddc542c7d0d41f0cd684aec970b5769d9b3da7ee0ad69e907a3b45a7b
SHA512

e374e614bc5a47198cf5274079e15d53d95f77806139929a10f13653f88975898b1c94e64ebfd4ea3392406a0bbb3eb17312d6b47c52578222ee0ad05866d1c7
SSDEEP

3072:orsHoddhORlw3urMRyA1DaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsZJ:rnrMDDaL1v0svI

Score

10^/10

socgholish google discovery downloader phishing

Static task

static1

Behavioral task

behavioral1

Sample

JaffaCakes118_5ea0da32fc24b454b7f66942ae5bce3d.html

Resource

win7-20241023-en

socgholish google discovery downloader phishing

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_5ea0da32fc24b454b7f66942ae5bce3d.html

Resource

win10v2004-20250217-en

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_5ea0da32fc24b454b7f66942ae5bce3d
- Size
  
  211KB
- MD5
  
  5ea0da32fc24b454b7f66942ae5bce3d
- SHA1
  
  8a9bb2c09a82898c6db58e86b47d3d757ccc84b4
- SHA256
  
  dcdefb2ddc542c7d0d41f0cd684aec970b5769d9b3da7ee0ad69e907a3b45a7b
- SHA512
  
  e374e614bc5a47198cf5274079e15d53d95f77806139929a10f13653f88975898b1c94e64ebfd4ea3392406a0bbb3eb17312d6b47c52578222ee0ad05866d1c7
- SSDEEP
  
  3072:orsHoddhORlw3urMRyA1DaLAZr+5/xTd5Wbb45RAU4cG5GRbmI6eMXJA/PGcxsZJ:rnrMDDaL1v0svI
Score

10^/10

socgholish google discovery downloader phishing
- Detected google phishing page
  phishing google
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishgooglediscoverydownloaderphishing

behavioral2

© 2018-2025

Terms | Privacy