Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 01:05

General

  • Target
    2c96213a1f63059e59781c2ed4ff0335_JaffaCakes118.html
  • Size 284KB
  • Sample240510-bfl2psda34
  • SHA256 8073f232603fd67246d09616112424f9953ea7d5e4c5e4f8b977094086e59480
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • SocGholish

    SocGholish is a JavaScript payload that downloads other malware.

  • Modifies Internet Explorer settings 1 TTPs 62 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c96213a1f63059e59781c2ed4ff0335_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2532

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 1KB
        • SHA256 40a181e9a8b85b862afc89a604eb290be3b5cd68937feb9ccfc467d3589e8e5c
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 914B
        • SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
        • MD5 SHA1 SHA512

        A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA
        • Size 472B
        • SHA256 c88fedc9c4ce58c474cbda40048f9c60ea139d81438401ca3f9f38de59e57319
        • MD5 SHA1 SHA512

        CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
        • Size 724B
        • SHA256 0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
        • MD5 SHA1 SHA512

        F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
        • Size 472B
        • SHA256 c18980e956391123486c0cb4398901884bb4d3258b9b9b6b3f14c2c224bbd65c
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 1KB
        • SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 e453c9d2e0f52d0737d6e910edf09e74f8960f6ca1a4ae02253b70bacf3b79ca
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 1270921c223ca8adcc895c732c653510bfe9b1411adc1bf5dbfe3870677672d2
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 252B
        • SHA256 054b282aad666b938e753c48e742917ea141564afb941eca9256b886dcd97bc1
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 cb7053b51945e07c4341a869006b10bc649b7998191c2baec25966620067756f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 a946e4e6855a18da7aac0da095892ec6a1fd165adb04b2ed389b15f269b1664e
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 3883214842e0aa88c30cc01b9a70981554ff8d9c16258a521a342fba4d61908f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 b3a50436261967cfc8d65cdaa32346dc6986d0a825611bb27ab5e5b2312528cc
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 7e49b66226d250ea6b9f05d2994996fdfc7174ec6c842369d124ce3d6412224b
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 b3527b4917025a844962e2a776fe77edb6e3f9ef89c5652c61a0179ed44b2cf0
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 2915c7c24cd4a2f30596b15a17a4b2c7ab027f2638fffac6da82d431b29c9677
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 d878b68b45a095b2309875e46ed50a532a335e0c0e511083815c6264cac9dbd9
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 0e93a76fef962853dc44177d8404e1e1d3efc95b860f95a23f42be752fab4011
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 fc476c49bf72f40cdce25437c5e8342642cfec1dd1831ef70cf9c2bc4f74f53d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 d6241b2e50e9402c857858c03264c7789ca437190080f2a0c4a9b97a9714f59f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 05c61424c115a16c62643cb323c346b2947c6934224ebce03b87ba444b1ba184
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 c566c87afb77fa1ed4fd06ab99fc0e7f739bef2d0dfd45cffe4b385bfaedcbeb
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 1f4a11aae4d80cb14cf42875e464f8b7162098f01fbfde82d04df7d2e3be6ec9
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 1c600b5593adcf22853eff62a1ce93a624c951bb92e26de30b2684f0f1651473
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 9d0d2cda2dea0602a297d8039c911b995dfe5bdd63348cd051a64e621a689fee
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 0ea07eafacc6007993da5d84a35496943ccabdfa2dd1ea4b756e27495551bd6a
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 75316e61185109414c650d6c8d505c4128b59d8f347056da35991becdfa09e08
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 40a01fe433577e8b6364970f28e6e60b6c38b2c83426a8faab2a4807074b6bf4
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 01036eb2603e28941dc4ac151b2d6b5c13823bbab38c3a5793b60510ae8a1189
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 91e4a0cc1233a48b672831f71128d03deef9ca3bbd842056c5c5a08880dbb044
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 defea90021c9736b25ea65f11fecf074f9ee2cd9767cff1f7f6b9de49936a845
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 344B
        • SHA256 a2c7188224977e47df3eafd96f76fcac1d54925ad7dbac56b7f55eb9da1b3ef2
        • MD5 SHA1 SHA512

        CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
        • Size 392B
        • SHA256 12a7e887109909edab551697a17a4bdad88af95135b83918ff7a80d700c736e2
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 242B
        • SHA256 5d7b6a623ad9ef17d6f5b38fb7b82f72f3324f9f5c51223d90a8032f5f915425
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 13B
        • SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 228B
        • SHA256 0c0ea9cc03c59039401d3bcd02de8f41dacdb13939e5b9a15932a65978a82f3d
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 15KB
        • SHA256 700559d780593b528ec5e16384cb1e0ccc417e393646c7c4759a3e446f6a460c
        • MD5 SHA1 SHA512 SSDEEP

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 575B
        • SHA256 66bf0f240ac270219f7b2ea99c6806274eb721d975d130d06afbb459c6cec72d
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 575B
        • SHA256 7ebd76340e90543b783569c5cc0094a9feb301d3752c849711b636286775b255
        • MD5 SHA1 SHA512

        www.youtube[1].xml

        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\XAW5VRY4\www.youtube[1].xml
        • Size 575B
        • SHA256 9876e6f7290ad8edaa5803b3b5551cc1d4843a22ca0f5706cd4a6452c00891a1
        • MD5 SHA1 SHA512

        cb=gapi[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\cb=gapi[1].js
        • Size 133KB
        • SHA256 5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
        • MD5 SHA1 SHA512 SSDEEP

        plusone[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\plusone[1].js
        • Size 54KB
        • SHA256 638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109
        • MD5 SHA1 SHA512 SSDEEP

        3604799710-postmessagerelay[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\3604799710-postmessagerelay[1].js
        • Size 11KB
        • SHA256 4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2
        • MD5 SHA1 SHA512 SSDEEP

        rpc_shindig_random[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\rpc_shindig_random[1].js
        • Size 14KB
        • SHA256 127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5
        • MD5 SHA1 SHA512 SSDEEP

        Cab31DC.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Cab31DC.tmp
        • Size 65KB
        • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
        • MD5 SHA1 SHA512 SSDEEP

        Cab32AA.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Cab32AA.tmp
        • Size 68KB
        • SHA256 1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
        • MD5 SHA1 SHA512 SSDEEP

        Tar31EE.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tar31EE.tmp
        • Size 171KB
        • SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
        • MD5 SHA1 SHA512 SSDEEP

        Tar32BF.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tar32BF.tmp
        • Size 177KB
        • SHA256 67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
        • MD5 SHA1 SHA512 SSDEEP