Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 12:30

General

  • Target
    7a42d0c5a8336d859cdba558dac02e24.html
  • Size 91KB
  • Sample240127-pptd2acbb6
  • SHA256 6b52527e64cc73e11e92fc41bd17a631eecfc49d0545ecf33262c544047605ef
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • SocGholish

    SocGholish is a JavaScript payload that downloads other malware.

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a42d0c5a8336d859cdba558dac02e24.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1260

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 1KB
        • SHA256 9945387e1b006ab18b049a38ff6ca45fb4f3491294c26972a0238e54ef687602
        • MD5 SHA1 SHA512

        265C0DEB29181DD1891051371C5F863A_FB873FA409335AF5A1706B3DE826BBA1

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_FB873FA409335AF5A1706B3DE826BBA1
        • Size 471B
        • SHA256 75dd54d4fa4ed8eed5be312810c9707ef71e4948f791d21c89bb58fc19c1d8dc
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 914B
        • SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
        • MD5 SHA1 SHA512

        4A9377E7E528F7E56B69A81C500ABC24

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24
        • Size 889B
        • SHA256 ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
        • Size 65KB
        • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
        • MD5 SHA1 SHA512 SSDEEP

        A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED
        • Size 471B
        • SHA256 b099d23461b4ad0748e2bfafa3ce4d2ebf947889b88c84781d42ebf2575f81a5
        • MD5 SHA1 SHA512

        CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
        • Size 724B
        • SHA256 0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
        • MD5 SHA1 SHA512

        E87CE99F124623F95572A696C80EFCAF_91A876CD48120717E0EA4ECAEF92BD40

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_91A876CD48120717E0EA4ECAEF92BD40
        • Size 471B
        • SHA256 be32f376113e4a38c0a674912e589250e1f31c1f4b16bade5f0688c8377f70a4
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 1KB
        • SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 a58fbe202e3960456c813b7ae0234feb368026810dc4d8bb75e3ce6d6c3e041b
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 c1434caba9ddfb062ddae3baa38f948b2cb7a41d83bf1dc660e5a58cadd70740
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 252B
        • SHA256 ff747a095612b400e4ffba2a1f9c0a4b9c18c503f3be9e5f9b59a85d5f994394
        • MD5 SHA1 SHA512

        4A9377E7E528F7E56B69A81C500ABC24

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24
        • Size 176B
        • SHA256 b46d767f2dde62e0d2eaf3981d0c13c81fc64306a6a343a0dc71fd75589c7c39
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 af72bc7f01fb2d19a4cd8102d724139e7edb82e6382722a08855414b2656ce7d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 24a7472fe6de1ddf402bb3c1f846d1eea202a96e04fd8977c60581c546f53b78
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 22c0aac3b9da4a887b06bf955b91d98b45b4bce22d67c7f33ccf2cf2afb8a8c2
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 76947d1724a2f9e1c09df3c8dcffb0be3be0efdcdba789a9dd2eefe500a39cdf
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 d8b23f4b743c1bffa866562dc0be87a9a6d3f8e84e062df1f47fa53a63a6bb5c
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 8716ae3b6ea814b7ff4b2da6d4dd4a27018d7282b585103f5c7e3d1a76199078
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 b505634859b12df07a800b9dc9ec10599810256902e36f1f60616c7279a6ff88
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 e38a0c04586c6a65a4118a9b4da618b5db77f8e8e52f9440e5758407e8f81c25
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 bb74d1c6e04dea5e6608bdbc5b6a183e41e02777fb1a86f2f8305c2dcbcd3c9c
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 bb23c5212e0c7fdc21204ebcf87cb4dae12ff7eac6cabcf95f926926a985ad6c
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 f21b97903d5ed3400dab9cdbabfbe376d4c7ef2a564dac27a4e9bdccae3d8be3
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 1f46b61faa45aeb1b0d655fac2c5e708b555c1bd3351d3389badfb4f289ee54d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 3479130d16cb4603b8b8f3384e5745ea35470b3344cffa6189b4a832bd22802c
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 2bd258cabf1633d38a96cfd706afa2c40f5c031cfb94750d19b2c3cdf1371afb
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 fe98ad2a71409a464bd7e3b78306a40e75cdf16b8b1b8b9f283bddcc6bc03b79
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 6699d1576d769e68423bbaa4dda5e11e4a959afe8fdcf1526e3d0c8437c3ddfd
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 a4e2708c3e637e9f7107612920958f6f5645e3e57cae266aa34294344ff71dd1
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 8cd0672e10ed6b9b375d13c5f708af2fcfcd12209d9de73f05253677ccf92fe0
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 f376882646c731f52e11232420b3263ea7993e53dd31e43ad831d1c58ff643ab
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 c12fc631fe1ad02031d964c291a0bb2a900fe392f036fc468cace2e6eb87ae02
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 ceab23cf9fe202ab00beac274b0badc2a99ca37f8a5e938b15c63b325117c386
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 bc65574eaab4423a6a990f5711052cd0ed9b653a9f9a5fb1df97772b2ffb6677
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 9d83d1fa55b2eb7c5187444c78f82cbe9ec7453d3873988093bd4a69106fdbce
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 86c7ee422e1902e44ef4b6563d86643b02f65af31aef409dff9c5cc6a9c48092
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 e2063dc4a1b432bc00009f3903344cad796f1d2f7b245cdf21ce9d6ee0a200d4
        • MD5 SHA1 SHA512

        A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED
        • Size 406B
        • SHA256 60fb962cb4789c3529962581116e684f2f4495f487227bb75723c577db68fb59
        • MD5 SHA1 SHA512

        A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_15F1E9A5587461A3CE6ECC6AFD0065ED
        • Size 406B
        • SHA256 5c564a18418d3b4b66af5423aeb9700cc58198dcad7e0c129823b36eff4a9090
        • MD5 SHA1 SHA512

        E87CE99F124623F95572A696C80EFCAF_91A876CD48120717E0EA4ECAEF92BD40

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_91A876CD48120717E0EA4ECAEF92BD40
        • Size 410B
        • SHA256 d3697364fe38425e8540210b895ca34a0ea5c05df3c2dbbf79706a4db714f2d7
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 242B
        • SHA256 ad8ad92eb14ec7834dd47c58d32fa5321604ff81df98d863e02e8e7612381b4f
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 242B
        • SHA256 f1f2e88c4fef60c9bbd9764884d8a6237e854a4710133a3cdb53d85463de9001
        • MD5 SHA1 SHA512

        search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
        • Size 4KB
        • SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
        • MD5 SHA1 SHA512 SSDEEP

        cb=gapi[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2A5LSDPF\cb=gapi[1].js
        • Size 133KB
        • SHA256 c2f33dc18eae27d4e878bf837dd97f1bde5151e44b0271408535bb93265b8c52
        • MD5 SHA1 SHA512 SSDEEP

        platform_gapi.iframes.style.common[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L1C65B7L\platform_gapi.iframes.style.common[1].js
        • Size 56KB
        • SHA256 68cc8a99c8ed5cc0eb3aa2146fd34bee0051bfd98faa3c03b83c78b4a12a8bd5
        • MD5 SHA1 SHA512 SSDEEP

        Tar708.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tar708.tmp
        • Size 171KB
        • SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
        • MD5 SHA1 SHA512 SSDEEP