socgholish | abe5217001205a8da1fa557b87fe7b1e26835da9d81df557f6b6584fa26bbd3a | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

1

JaffaCakes...e.html

windows7-x64

JaffaCakes...e.html

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_690515a526599f6b2f044f7be6b93dbe
Size

64KB
Sample

250312-e3nqlaxpt6
MD5

690515a526599f6b2f044f7be6b93dbe
SHA1

63b67a4c74cd5159c4c012da59103eabf6373464
SHA256

abe5217001205a8da1fa557b87fe7b1e26835da9d81df557f6b6584fa26bbd3a
SHA512

ef402c5a6866c4a92718e1fc8f082070d500d960ca6cf090691ed3104fe85b48edd163a49744ecd82498e8c5770dbf372ce932461c456d359935a53c2d589fd3
SSDEEP

1536:ZjzGwhEGtlNJQL1s2SwKjcsb4Hsj4sRGQf1detqx6:ZjzGwhEGtlNz2Szjcsb4Hsj4sfdetqx6

Score

10^/10

socgholish discovery downloader motw phishing

Static task

static1

Behavioral task

behavioral1

Sample

JaffaCakes118_690515a526599f6b2f044f7be6b93dbe.html

Resource

win7-20240903-en

socgholish discovery downloader motw phishing

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_690515a526599f6b2f044f7be6b93dbe.html

Resource

win10v2004-20250217-en

discovery motw phishing

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_690515a526599f6b2f044f7be6b93dbe
- Size
  
  64KB
- MD5
  
  690515a526599f6b2f044f7be6b93dbe
- SHA1
  
  63b67a4c74cd5159c4c012da59103eabf6373464
- SHA256
  
  abe5217001205a8da1fa557b87fe7b1e26835da9d81df557f6b6584fa26bbd3a
- SHA512
  
  ef402c5a6866c4a92718e1fc8f082070d500d960ca6cf090691ed3104fe85b48edd163a49744ecd82498e8c5770dbf372ce932461c456d359935a53c2d589fd3
- SSDEEP
  
  1536:ZjzGwhEGtlNJQL1s2SwKjcsb4Hsj4sRGQf1detqx6:ZjzGwhEGtlNz2Szjcsb4Hsj4sfdetqx6
Score

10^/10

socgholish discovery downloader motw phishing
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloadermotwphishing

behavioral2

discoverymotwphishing

© 2018-2025

Terms | Privacy