socgholish | 827f3500b12b93ed78a56e565dc75de8f13717155df561c69b901e71a8f0edd7 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

JaffaCakes...a.html

windows7-x64

JaffaCakes...a.html

windows10-2004-x64

6

Sharing

General

Target

JaffaCakes118_626147a8b4d40c89643c5c106178292a
Size

67KB
Sample

250311-bmhb4avpx8
MD5

626147a8b4d40c89643c5c106178292a
SHA1

8eff86b65e16d21e24688d4e3e5accac590560c2
SHA256

827f3500b12b93ed78a56e565dc75de8f13717155df561c69b901e71a8f0edd7
SHA512

476ad24cd7f58a7d07ab7c4253a473b3c6db461991a5ba0f921d8954cac1bac32cbdaa99b06a646a2fe32010e196afe29ad943efb4b5b68e577b41ca4a28c134
SSDEEP

1536:ZdzGwhEGtlNJQL1s2SBKxmEq/4Hsj4sRGQf1detfq6:ZdzGwhEGtlNz2S4xpq/4Hsj4sfdetfq6

Score

10^/10

socgholish discovery downloader motw phishing

Static task

static1

Behavioral task

behavioral1

Sample

JaffaCakes118_626147a8b4d40c89643c5c106178292a.html

Resource

win7-20250207-en

socgholish discovery downloader motw phishing

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_626147a8b4d40c89643c5c106178292a.html

Resource

win10v2004-20250217-en

discovery motw phishing

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_626147a8b4d40c89643c5c106178292a
- Size
  
  67KB
- MD5
  
  626147a8b4d40c89643c5c106178292a
- SHA1
  
  8eff86b65e16d21e24688d4e3e5accac590560c2
- SHA256
  
  827f3500b12b93ed78a56e565dc75de8f13717155df561c69b901e71a8f0edd7
- SHA512
  
  476ad24cd7f58a7d07ab7c4253a473b3c6db461991a5ba0f921d8954cac1bac32cbdaa99b06a646a2fe32010e196afe29ad943efb4b5b68e577b41ca4a28c134
- SSDEEP
  
  1536:ZdzGwhEGtlNJQL1s2SBKxmEq/4Hsj4sRGQf1detfq6:ZdzGwhEGtlNz2S4xpq/4Hsj4sfdetfq6
Score

10^/10

socgholish discovery downloader motw phishing
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloadermotwphishing

behavioral2

discoverymotwphishing

© 2018-2025

Terms | Privacy