Socgholish to Cobalt Strike in 10 Minutes
Tags
cmtmf-attack-pattern: Masquerading
maec-delivery-vectors: Watering Hole
attack-pattern: Data Models Exploits - T1587.004 Exploits - T1588.005 Kerberoasting - T1558.003 Malware - T1587.001 Malware - T1588.001 Masquerading - T1655 Phishing - T1660 Phishing - T1566 Regsvr32 - T1218.010 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Brute Force - T1110 Kerberoasting - T1208 Masquerading - T1036 Regsvr32 - T1117 Masquerading
Show in Graph
Common Information
Type Value
UUID 7a2f644c-8a9e-4706-8556-da8b60170222
Fingerprint 1632890af9f8b8e
Analysis status DONE
Considered CTI value 2
Text language
Published Aug. 24, 2022, midnight
Added to db Oct. 24, 2023, 1:44 p.m.
Last updated Sept. 5, 2024, 2:22 a.m.
Headline Socgholish to Cobalt Strike in 10 Minutes
Title Socgholish to Cobalt Strike in 10 Minutes
Detected Hints/Tags/Attributes 63/3/10
Source URLs
Redirection Url
Details Source https://www.esentire.com/blog/socgholish-to-cobalt-strike-in-10-minutes
URL Provider
Details Provider Source level domain
Details esentire.com www.esentire.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
ca16a9a0.official.stradlings.com
Details Domain 2 
optiontradingsignal.com
Details Domain 1 
tworoadsbrewing.com
Details File 1 
87707.js
Details File 2 
pixel.png
Details File 1 
vgauthservice.dll
Details md5 1 
ecf77ba093cea883fcc736f4b62f4605
Details md5 1 
14fbf3009f9f37149f408e99cffd4931
Details md5 1 
ECF77BA093CEA883FCC736F4B62F4605
Details Url 1 
https://ca16a9a0.official.stradlings.com/pixel.png