Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 10:46

General

  • Target

    126204749c8d8280a6326e40c32e477f_JaffaCakes118.html

  • Size

    94KB

  • MD5

    126204749c8d8280a6326e40c32e477f

  • SHA1

    3745e11280d43e4027d0ff0d2bccc51ca3e127e4

  • SHA256

    f9e93bdfe8d1daad459f6088afce1fbdb8505561239078fbe4d3ec4723ca258e

  • SHA512

    acba59e25088d6d26949aef01226ca15c51c9c8452e223a45a6952604f8327eff2b808712f4e463f4548a21e5a5a65dbf84ef598684ae48fd8b649ff87bb6bff

  • SSDEEP

    1536:xZGIpB/IFa0o66g1tdHW4N4fKVOfvKn/C+OmuX1:xZGIpB/Y4m1tn/C+5uX1

Score
10/10

Malware Config

Signatures

  • SocGholish

    SocGholish is a JavaScript payload that downloads other malware.

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\126204749c8d8280a6326e40c32e477f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    daaa3db64c5bace6877eef6555487d0d

    SHA1

    ed112df64ec16d7fd1e7b350f630e976977da09e

    SHA256

    ffacb609ec21856f9c04b4cddc87142eac26065daa266da2629e147862f29fba

    SHA512

    370be602dbe98a7ab45bf8e408d3f49f28f302b671aa956dc386bc54786abd0f841cff3cb14ccc433e83eecac40e6c46a468148785c12041e9f052d4ae85c2ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    6c4bc7b14df2e47dd36b2ef995128e5c

    SHA1

    9f18a2f99483d94bcd159a099b41bae454a4a7d1

    SHA256

    499b12303fd998b5d70656324acdcf9d0b9d7b87c2abfb921f11e2f89ed71e22

    SHA512

    25250fd8f9add28fb20222316f71b303cc8ba9c24e5b73361c4401b67e98094437cb609f356145f974d351b6a589eeb21d51d9833430b46d8c10283f84af28a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    35af45baed42d7ef9b07351aa5f067b6

    SHA1

    55f4177f6fa053352e5702037b9e3fd4a4bc71e8

    SHA256

    05b0394c8057d0455e8ff3f12fbbabbdf79fa6aa5606f07b80b840fa47399b71

    SHA512

    3bca7c5e7489441627687f701982756a8341a4b240630ef6bf43588b4a49602cfbeff9fea6965c7dd6c1892ef21c55d9be6bbc0852b2f975cff2fb74739aa53b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cc395d41b897bb75bbba9ab8fb29723f

    SHA1

    b337f7aff0e5540144e6dda4385d2f976c6e404c

    SHA256

    3a330371e615547201d8327fc0c7a56d9f1f90bc7e6d452db6ad830bd47b00cf

    SHA512

    d9596efe211e52cd7a9d74e9e3c583e01d1eef37fb5063e2f9f8cdc27fad2438feb3d4bf044d0c4daca723f9d7097ed555f34bc4721cc025047084af45ae7678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36a7df564990944ba53c77b018a602ee

    SHA1

    5b6dd3204b305c599620b2895fcfacae77d717db

    SHA256

    2f609ff79764eefe3f734927ba3d689c2b6e1653303660e3cb7c00c2a748223a

    SHA512

    665821f4f12250eafd8600527077c54ccf752d491a9c888092de26188dfc3575120748bd1126cf2e6dc088f5eb8ce6bc0683d3cc296027bb368d35a0c2f48196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af51998d19f4c9be4dd543a0c031738a

    SHA1

    99c190ccbe47d0cb8ec494243eb3258ff6ee1c31

    SHA256

    43dafed64ebd20b490be83213053235140a739e6347bbe0f2bb22d75cec1d4d3

    SHA512

    7505f1ffb87e4c3ec0eb9e6877f33f508c97aeb7065b75c63aa3316bd089be9ad2e6e3438bd1239e3c7061abae0d3ce03643e6307e5c1fb388734e9ed5494c6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c2da714bb34944c622c91dddec3bd6f

    SHA1

    9d27f16eb2c15f5c722ae9c25d28986ab385696e

    SHA256

    9de04b6b7089144b2620f937ad8c1b14ffc13bd2c8db47c1c7a15c00e5527f14

    SHA512

    f8ec33ed2bfbcfb4bf7cfc8392b154c55301a94cdd2b6bd4f96e717636bd800354b8cec2c7f63aae142751a68a097b9becaa6044b6f68cd518c278bcf8a0bf33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5226134dc663de670e6130961205a82e

    SHA1

    6d05d3760c959ff39286c4c17fb596f1b34329bc

    SHA256

    2e32a6e4dc9960eee0e94e47aa44b9524b09330bff6fb427f26e878b039565e5

    SHA512

    3fc3fe4171e8423edcd7a65ffb7d5455de3efd8479cc5a9bdb23c47dfaac0ad1421f97de85a17e3b820f6e10f1770805ede43757ee432ffd16411aaacb80d6a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    947a08f29fe362629e365dbd2e40c636

    SHA1

    b561efb9ce46164591781e9ba1cd3d577dcff202

    SHA256

    a99ed4d9bdaf7fa27065d17997d99b66336b2e4f69948017409b5827aa787a02

    SHA512

    21456a43286707900019a86148b8b87c16229147ee5edcae29cf4a024f699ee04d9fba31299cf5ec4cab69155e7d37e68ad1b76d08528cee4040a9f885be881e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d26ff09b9fe306f8a2c39261517115de

    SHA1

    d5bd22ce47ad3f7712d4f0f85e2eb518884ff80d

    SHA256

    b8f461044fb82452ddb1ce2e8cc020282cd1c1b31899f4147a845d2cb22c1374

    SHA512

    fad228e1c7d6dd7d136403b77dade1c3f403acb14d7b1438381b27c24adff3dbcae720ffe872414ce61106538462c1bce4e9024ab4eed01c6ca1433bf283bf3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbc84c999bb9499e325a8ababa4ad019

    SHA1

    cc89f70eb1da3ac6a8aecb1040bbefe775d84170

    SHA256

    05914c3bc081a08533b5980e3da1c5f39eda1239131ab3a73a1aa279ababb906

    SHA512

    77395255bf837597e5e2fe3e20c4a3a0d905cb25f9a497464a47e0aed1cab40c9519a80497912079551e58bb1ea43db0d98223fd70d6a4861fcb6d84ba991f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    621e5b89d111dc443243ecac78bfbbec

    SHA1

    0767fe6c43862464d20a90fc0023085124badd21

    SHA256

    064f879a87c76ce1fdaa06d1e012816368c2cea271332a1217ad848392948c43

    SHA512

    d392ad88e91e7953a1adb36f74b71fe448629e4b8144c399cb01dd64647ab02c4a1d05471b1f14c8278b4bdea0b4145c894098d457fb28c559a9b25d2dd04270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dd4e79a4b70db02179193ae00879fb0

    SHA1

    421d22c9d27dd0683c1108bf774d370f66a1a375

    SHA256

    c28a08e321c479a875ab4ddac8355895848e163220a0f4a5520b0d6b21b38ee5

    SHA512

    82b15c2090e541b40b2e396e99743ed8e6fc9f9047840e49eec608f8f44476cebff1ddb5f17d1ea6be3b38b7c041c3a62896918ff39da3dd575a744a967950b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3e4ea9a05ef0072f4462c7d6f24afb6

    SHA1

    cf6099e08ad211dd92ce8f6a9738b3676fe9220d

    SHA256

    c04554bf91fc9377118ffa87b4d9c88d710e15b400bdf8367ef7102a30f6c4d0

    SHA512

    bd9c2821361d3dd7c58baf8c345687013e8140b502acd405bf9e5a68923f7835c6b74aba293292bb119c7b5f9cdb90a8e0bd22c5f150e2ce0d89e1ebe14d9418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7ede75111d647a69ba9aabc46949cdd

    SHA1

    257ade1f15b0df5717fc4bf078b6d232f7e78923

    SHA256

    d283ef392a5b15446ad232fbcf07b509f1659ffcab2abeea6a5b7dbd8aff0fba

    SHA512

    2a758eedb8052c660c1ef65cb706acdbd6d03fa40079928e8fae721948cd5d9ecfb19362a8f5c2612a0347f6820c986b352598bfbf5367be0204c87b96566a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    236374b44d7b2da9bfd29aba49f445aa

    SHA1

    89b7ae141fa23e97f5e3dc87044998e05f140663

    SHA256

    e85cc1fc2af2e8b7624770e5ac408b51fed80c0fe7ff4a279f10cf35008f7480

    SHA512

    ff15872105a4f39631dd84362521b13c62f6ed884fac73c98d9c131c9ec2ec418121fcc215b5a387ad770c75284373aa884591ba2a0d08dc5aed6025301eb60b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    406B

    MD5

    ea3e221a8ef1a34f83f050c051195e95

    SHA1

    426f4f40cc596d8a4382ef8b566dfa9b9973d780

    SHA256

    011366314b8fcdb7f35100585d414378a5b4035bcbc1acebf50cc4b4c5b41adb

    SHA512

    2d41a5ae08cde8c638e4bbdeb3a3b371a7fcbcbee9c92008bae2f4c433627f6c311ff4ea66f302c69d2538c4b30ee1a3edca7d4f9818fe553820a67d3b8ef6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    f534c7a293739b5a5cf9929a502688d8

    SHA1

    624a88f43789653acd472ad9a42ccca41d7b635f

    SHA256

    91c90d19aec8d3ff566eec3725ae2dc3cd3c523a7d4db6480a61cfefd3ffa6c2

    SHA512

    2a920ae511567b98b82e6822d2514f3b513bc60124841a5abed76767e348fdfda7c3347ed4ba2d95b7e637645bef8b78662c646fe9e2a26747874a3563d3f75e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    44cc143a3d81b85a6117b2e33803ea0a

    SHA1

    f445380fbd95215ebbf342f1446d4c613ee56b58

    SHA256

    4e006925729d557c6943a7d05ef132f7ed6f3bd2ab29afcb6b71f062b2137569

    SHA512

    badc9fe94b991ba5c12a1e01e829469b8a3940b83a1fbf2ad6c9884600ee4898f233a627e64d115021942e583fbd11b64446950c82f5ef410de6bbcc96ae09a1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Temp\Cab14CA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar152B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1659.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a