Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 21:21

General

  • Target

    034c1776130efb5bef6a6aaa64cc99ec_JaffaCakes118.html

  • Size

    56KB

  • MD5

    034c1776130efb5bef6a6aaa64cc99ec

  • SHA1

    815c2d695b2dd42ed29a6daa51d99b33ced9dfb1

  • SHA256

    577d547f3ec620c55e32cebb72c213c245b71e1ddfaab9144c4ebcb6e3637578

  • SHA512

    4c19e9885cd6756dd0015c968da30b16e970ef8c346e351434b0288069a07988fa7e43929cb64ca6eef110db3b2ee720e4ea0be64ceea8a032edfe366d2da586

  • SSDEEP

    768:/QqlrZf0HZipkm8pz5v7K9+RJrTYYspcm+M6IzdrD2AY:/Qql9Uipkm8pxKERJrTYYspcmwQdr0

Malware Config

Signatures

  • SocGholish

    SocGholish is a JavaScript payload that downloads other malware.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\034c1776130efb5bef6a6aaa64cc99ec_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    c1abeabcf04d3fa2a307024ff10a8043

    SHA1

    1a8fd0c11c9ba298795684b2281930717bc48856

    SHA256

    cc748b939dea177d6ed7ad3e32519ec935fc3e981d09c53f26fd459fb2cad788

    SHA512

    8f7e10bc7a19084fef07368917d7f0c3104ef5b54f51530ef4dbe94c70413b50a711bb93f6834ef738ecf97be06c728912abded85a069cc556d3f1597582902d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    519c29fc8d2dc9cb8e6494766016f2e6

    SHA1

    b29f9be80db5194046acf5431f6c9fd0ef7b8a37

    SHA256

    cabda56448a40fd49a42156203e1e4fa25d5ba3110d9fca0b7375fb921701a4b

    SHA512

    2a14469adc764c79277e057ec694dc4ee5b532bcc37de56e17a5722bc7c2a8312f18eb33f4cb20dde8cb855e185b1a9c4b0c6ca861bbf8cffc9ef8a40fa07aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dac48b4ebb731f8e56f443584e6065c5

    SHA1

    65d0709039f79022ade3d48524972f225f11937c

    SHA256

    c4a9dfae0d894c9852ce2873ddf137fe6ca64f4550d8f7a562e14b14fc02308a

    SHA512

    9a21a7e7989edac40fb23ebf0224eb74d57178081dee10bf6e2ed97f026e4cfe5df41a3ec4bc648864e82c9e3eca2764587e2e02a4f04b3475482bf3d532c8f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bbeb71773d176f4dbae598490eef2b

    SHA1

    44fcf7becb4fe00a89225800dfeaa54a4c0150d0

    SHA256

    1efa138363d8e46672efd16a09bea59065785003c0540293568df8250f24c3cc

    SHA512

    47d013d26a6050f261d96bdc789ad4a43e497087140c8835d9c27f85941c12075c57cfea8ca9801473d122632f4b8d2db75e1bf88ccfd65bc8810063a53091bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0fcbd95c5fa2cd0c3f0e85cd9cb9ef9

    SHA1

    8b372c51297007aef63b5ece55553839cb8adbbe

    SHA256

    4044c229c59496056f03e0bfc20ade10cb40f70418d1acb45c1367b9939e4a31

    SHA512

    7634b901d68a40dfc8c2b0a7cdbf108142659a5026fc0cb669f734fc77d54579aa98a321aa5ece8ad6b432a220b08298aa3fe1463391528f95e82ff8c99a2f32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61fe862753f950c11ac8eda8358cdc50

    SHA1

    c1ee180ddc5f2aa5c5104bdc7353a468f7e0d3e8

    SHA256

    a31fb61e8ac5e33b3737fa7da0796f25167a6a1cabea7190f54ca56d05474cc8

    SHA512

    12decbef7f643cb29166caa83aa25b1a2d694abd5523139aa84380326b205d72dbe8ff4bc6810959da88ed6b693140cbc37be86c50e38d0b11f3a7495a922e42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af4b549b5606b0cda0d218544a6d5fba

    SHA1

    bfd1d98d255b53efa986c5b93597c173ce9e7d12

    SHA256

    f7dd93a267ea1d52804ac04fcedffb9b68dd21e642950c445c96a21b1a4a03b3

    SHA512

    107c7cd565180b22f452cc1c812edc8c66ead5cfef879a83e8202b8e6cb64c19356ac52e237e25eb7ccfa01db5d65c0e387372507ff55a7bd047a30b74083d59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b618ee60475050a75904ebdab09c7837

    SHA1

    9f8896d65f3a0ef285a12c02a3bcb67a3c6a4a6d

    SHA256

    212ed8875df76c83d83ac7fb6b0001c5ea2656ce2f778aeaa9de40e1992a3b51

    SHA512

    7b08942dcba8fcf6762e363a14f5673a25e4dc8123795e0453b802c848697fc86a489d7db4ef9aa925aa591dc5b8f5bb5ed6320a0c0f8a9294cae0239686d9ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35f5ef42a286ad49cd0e36ca3e5e77e3

    SHA1

    9dddf28b1e2040a20feda811b159171b34bd4197

    SHA256

    678a74d1555a5a2977ccafc9d9b68f1d87b0232ceb1e05b1fcba0c0d3ff9db9d

    SHA512

    0b1608479ab3f74f162fa3a28b1cfb21079247945cf842f2bc2018844ca072994f56a8ff753486fb90eede1bd3dcadb5a10d08142d4f39ad35b0247bbe336723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c1b4c8c86039e684c7b120298ab90ee

    SHA1

    77ce850ff365b9872c22ad62caeeb736bea019ac

    SHA256

    2881756a4ec173d269685c6aab5c9855000fcf92ea5f96548ee0afe36449bb7a

    SHA512

    4dd3912e5d5eb393451c5ae7b678c645b1a19a1b2dbb0aace8a9580f2ee9d1b2ab5dae9302e4cfc89eadf28d4e5e3a156836e3912390f8e7473efd620350dac9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a991203a42d7e2c0e6ee4f8e7c2268ca

    SHA1

    46d9090bd017f7747bf552adb723b877e4fd9271

    SHA256

    a46b52a7b163334581d8187348f1fe06247702e5cfda98c938bffdeae57ba8d6

    SHA512

    b57a24639a7624d910f5088cb1744a720baf7a492e974962ffee48ae63612ee6e9c1feb32444775e2ff06cb4588abfbccb61f8637e6a81bb60359473e9436ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93f5b6bd633d0992e6c96c3901e0f134

    SHA1

    298368f3f968739100ad0f5021250937ddd424a7

    SHA256

    dbbaa8e3b934b1fd2ed9e5e4a7898e0e3cf9f54162d077bd14660cb2a703c64c

    SHA512

    d002ea69431c4e8a21b0565e80226bcd10f89e0b56d434480a1ebf4001840c83eafd73f5892a9f42b70799aa7127001b64a27e3574a90bb4366ab164735f8d62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    782c59cc3e2c80064c4a23a0301091be

    SHA1

    0b53aabcee75623245a991923b049db6932c181c

    SHA256

    b42dad1849dc27c9f10a736d64a45140a2bf18db8727dfe17ee43ec8723d9d54

    SHA512

    e59f29b69b3a1669615a59baf55c873d3163ee6679bdd806171122988690f9f563ddbf4b23baf9f3d10802179f96ab3b2ded4c35bc7c40de0cc3a265f679874f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bc5804595af303f4e3dbbcc746e5b3f

    SHA1

    218f3ff55ac4a8f0ac890d7d275de5f742dbdfd3

    SHA256

    29331354dffffe368402e7690fbc1f07c0653e1c8f4285c9e9823f69a2bf556c

    SHA512

    54528adff57bd74b8a9fa1744d846b2d95f1ecb0b8aea7ef50e3bc09f7e5167f8762a6046bf2375372123cbaeff5978fa78905bf8e599dfea6fe43564f172bd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de67cd2d9aec4b703b4cbb7b95dca46a

    SHA1

    aabed82146aec31cf59123fd08e0f32c52f752a9

    SHA256

    485224a622a504265b7993a2dc02bb696fd83429b1837716202fa9e6313f1df0

    SHA512

    ed82c5c60d4a240f3880e7137ae0bf2645d922b05cca835b5e10b0f85aba5d9ee3d827080f106a1ebe89332cf25323cd99c9a2187e72f3a562b5cce7ecf1593e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f3712a2380c6027101a1df48515535f

    SHA1

    a6ccdb5137eb2a420e4cc018a378baaa56ee7700

    SHA256

    798637f0db41065bc2591d8d6d39b9431ddcfda5ba187480cce59f1038a0162c

    SHA512

    ba6178b94459cd634fa77e93b26ab8f31ef84e75a66320f61a4ac377e3b22ff6cba9eaffdc28ef6c019111e3fb0fb7b78087e98746d18c7e84a4546c61d28959

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dde9cdea04a1a044b47c106d935ed11c

    SHA1

    7a63d8f67c0ffc079c54ab882685a900bcaa92ad

    SHA256

    a49aacfc4d343e4750d6c13d57ae5b3a5ad487bac62e14731e467e2ca56f9cb7

    SHA512

    a4c5997b2a66e5647490039926ad04678cd22c9c9005275bbb4e79da0df7963b5b0881c7b11a56f0812694d2b3be575dabe75f19175aadd4315df4db429b021f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45333b14941721aeaae5973b0a436a55

    SHA1

    6465374d6144bdec3b0c18bafa93823d51185dd1

    SHA256

    511b40c9853e4e0f66dc0797eb69bd221b491ac07ae627957ab8ca3f3ec846ef

    SHA512

    3d04910c30f4e5f2eea2ad538a921cffb0135bcf4f85ab34754f5bc7a19b42a4763da241e25d517545061631bf356a28d5da55c309a44985c78911795b72396d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    980e1157f67fd565041eb9fdb490538b

    SHA1

    97715638678be6694959bcf9544768d006dd9560

    SHA256

    7dade129e59e8fb3240d423c8e0782b069ef0e445f44a92eb4488b0fd802787d

    SHA512

    0e8c9c2c1b426266677fe068e47485d7662016af534d6f7da68ee3bd0ffba1b74174ebaea94eab2da775daf8497b7280e9989df8fbfcf3c64723930f6c58d150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a2f4f452c5988c666ba1ff845384240

    SHA1

    7f05129c6b30e8d105151ac79a2ddca4f21147c1

    SHA256

    d85340d10ba6a98a2b30de222cd455083e1269e17a95b1cdb00efd94ce625676

    SHA512

    da0d99880acee23afe2c97f3e93f8100c299e212af8c495cc53f5fcd594359916f3f47c75f785ab432ebfc43a23829d9eb67956fde87ecbd01b8dfa6a6b97183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    148bf9b1f6b2123587e5c1aec4ba81ff

    SHA1

    8df8423025b3b6d372023df77e64f21659cf7bbb

    SHA256

    62363c0e53cc5877563a10bc360e3bb783525fddacc403e53da5ca62385b2b40

    SHA512

    fa36f26b3a3a8ed7c245e0aed07cb614bbab71d9876aa26395c23840e380c43ccfc2042792306dcbf613a6f8351651c9b1fa5a303385f8a3871d4b9add145e9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c362e4709545b5c45c3767d7eacbc8b

    SHA1

    0d5a462af8eaaa0da70f839f31bb35809d0a3fee

    SHA256

    e851205e9a83369770546a47c6250e8d628290ef22a96ba9d20aea9cf2874138

    SHA512

    585b9ee7f6b07c24cb2ab7c2c3127ff8e5cd7e716cf22c754ccc7da6c96423b97e38b0bcbc0039f535a723306f352918d4b0fa710fba9288291ae34ce67a6051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba7e0e0c36c18855e519fed9ab0e818d

    SHA1

    3baf30c08824d9ccd19ac2aed7e7a67d75a1b855

    SHA256

    2ae02b2c531f4d17ef6d05a2cd4692c67a7a4dbdf1697c75b4f26d33e8d9009d

    SHA512

    beb1bb008b16149f7ee7be330236809e75cb4d927136efeacdc6fdfb2c13857ac8b456077a638a53db9615d4b27324a405eb9bd645dd4f480fa7085140756dd0

  • C:\Users\Admin\AppData\Local\Temp\Cab9752.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar97F1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b