Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2024, 12:14

General

  • Target

    8b6e29db08a246590976763d2bbaf597_JaffaCakes118.html

  • Size

    228KB

  • MD5

    8b6e29db08a246590976763d2bbaf597

  • SHA1

    15e1b6b073b1a0da839e91d990f9b7929ece318f

  • SHA256

    0ca0a96b78c548bced34d9ad21d6e4d56827b96d5c732074ccda14dcd5334400

  • SHA512

    b2e5624d4583df521e5a37958015fc8727cb19d500f7ee74620d24254c890734acf93bc3420b311db15c9d0c0fcde3958bcfe0223d71bb3ae56122392c33d0e7

  • SSDEEP

    6144:o+RELVzhXkA3d8VZQvzwV2lms5JBpknvjXGXgcHSPBaKQk:LRELVzhXkAN8VZQLfh5JBpknvjXGXgcO

Malware Config

Signatures

  • SocGholish

    SocGholish is a JavaScript payload that downloads other malware.

  • Socgholish family
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b6e29db08a246590976763d2bbaf597_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f6ed4e9093cb93227c92fe88404a9149

    SHA1

    a854d2f36d16047f7e1fc5ea764a5eee9083f27e

    SHA256

    f91871283a34e8e822b27973987e74c60a599b21d6a15cb631e1a59a6681afcf

    SHA512

    2f6f5bb1702e75ec672e80d79c20516ce85d05de4c2600ff59caa358c0b7d92486053ee12845b18e55036a021f2fbdb91812ec146a9e813288f69dac61551f1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd0178cd0f542eeb3e1d40a3c797dc20

    SHA1

    0bac33159fad3b3e36ec1eb3bc3ab1238cb38283

    SHA256

    d61e02dadb2cf32e0d3ec434b86f9641911508c71d8caee849f7bfe5831f706e

    SHA512

    e9fcc978fdfeb784b18eec86dfa9a58a1472b667dec4a3e8c068e1bc9ef1c32eb231061788055823833f6a8df45f1af56401f76eefd9f4a64332ca33d03fbc90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd667a4bcc58b838c94b475c32a6ff74

    SHA1

    2d1fa6af39503e75954bbc37ca7a7357b205d633

    SHA256

    86f5c9868f3d718478ed508b12e558f2832ae65f3a8e3eb8772d5c130a01894a

    SHA512

    650f67b65d1630d61ecb29f3e2e52d95f1b3d3d341bb8d9f6129e5169794e37c887e13e2b2afbe29c4f205a8cfbca494de0b9a298cf587ed5fc05e674c1da024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb7bf8be0c6a0a76eec2853241192e64

    SHA1

    37b0e1370bff648c2ed84fa089c986aa5514c2c5

    SHA256

    6023a2244b9ef5de48fbf31db3e34ef1c1df58934ed0b01198edae09a6682836

    SHA512

    ea3cedcb2be5bdca3d3a621af92cccce18bda81afd6dc6054b5e855d7d9b184a375cb310b548b710cab4e2a557caaf28e9ba4315b296bd93f3e262b82f0c0f94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8eb47068788c06ddcafc41e0172d714d

    SHA1

    ece3960a84eb401d3ba6f619834d69f8b41716f6

    SHA256

    b5e75235a56988daf02e875442e414332206b7394d732a9e1958a58a480b52c2

    SHA512

    9f573003d811e3adf41159d9a9f33942c756e7d2baa7ed6e41f3cdb0368b229ba7f21130f200f1bdc3328f5644a4bb15281bfa048cef6cd08c3bf646704f1f9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4cf8ddd662da68d5d1055c2a49f351b

    SHA1

    12236fe6d892945f2da78dd0823a6c6c0177c28c

    SHA256

    45a4fa481a07af704b501c54b103d326e99f26619d83053868cb10fdc37a6e82

    SHA512

    dd00bb3911fa00b4e1e8b967f05a69e0a1dc6aa3c4bc096bf04e18192a1fd3ff1d80d541613bd3df8d9f69c4e6187e20e6816bf03551f5dfee7b351decc4609b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61da30b33eb3b939d793c937c8bedd04

    SHA1

    2eab9a30bf71c42d35383cbf27040495d078f519

    SHA256

    717f4069d61383f9b384f67f3b1d4cf635efdf6735237a62f952d3b9d05defc9

    SHA512

    6c53903c3ceac0eea529093cef49edd979cd1fc827a7e8763f28d7c9cfff508aa2a70127e2c0977b86597d1e6a7bb19b059bb74759d60e726d5cd22d6e375d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6416f595f3eee8f1e81bbf0e45da796b

    SHA1

    4660e5f59b540e3fff288489fc41ee4d3b6c9d5b

    SHA256

    cbd0aebf58d38231e128239dad696cd6a52e59ef5656b780cd3a0228dd41e610

    SHA512

    438ee84edb5eb72829766f706fc1da854d0febb2b2d74ef4e3c772d7c95b6d11c5f355310b662786111bcb86f71394575ab4ff1ab9d0c51051e9b5b6f5304194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fb21173e9b8a52410e459f7ed65e0ce

    SHA1

    d38084e0196b1a51e41596f75573dad98007cb65

    SHA256

    ecf1bb2606b116496b4676dc9a78fb6281af9195e44e58d37be93f9a2deaf79c

    SHA512

    0cdaf529634f99356e7457c27143adfc1dc0413d2ac5f3a1326c35361262465b0a6663267228ab493c8ff2fc7a16d72f44ee000f6b276211528f7fb7130789bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    107a7772c76846fecebe869c7209d0b8

    SHA1

    5087979ef4eeb5223414b7304f2a06f1a28fdaf0

    SHA256

    ec495402d8303555700776b111f0674b7e9bd0d0eb90346c4a96a57ff633c412

    SHA512

    70a598e9286174e98d7d642946e8c7663b356a125e405f507ccfef9c06602e888b9e626f9cc5f129d8d809f7f76549b6e9ccdd434988374fc8f15c0207fa53fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aecec3fa5cda9beb2b3a29fb43119dc1

    SHA1

    e1bb3159a8d8353e41edeb4c183111781b4604c9

    SHA256

    0a26d5dcadc9939c84e947e09dd540169766782310bfb143a68e0f163c115990

    SHA512

    aeb893e4dd3f8e316eae8189181e5cd36248016a6f30b3ebf35d5f294f9ab38f542936f704424cd147c2dfdc454507a2c6e27a98e9e2c51c53bcda42534f98ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8874d131fab85ff7b8bef537f89a797b

    SHA1

    01184a168eae0c38a2443d66c86425f913b87661

    SHA256

    dd2ca865e19e0eaac2f262369010c8839194c451298b9f204344aefc343c0150

    SHA512

    5a412af42f768b97107b1e558c70f479d8596afe9b52c979c2f669a531c114bb235e360695625f56dda2799b65cc9e276bfadcd8f92e816a40d464843ac0077a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cc63e3374bf1e49c4127a7c342a8433

    SHA1

    68fc8f7b6a38f29bd8357eb911321e146ee97c9e

    SHA256

    83271161a42260222eec52b09f89d62cd2cd1e9acad32c8a5598e9b9e1e57904

    SHA512

    b878572ecd556ff3866ac78762a786e0424ed1b5f87dfe96da83a2779dabfcea852d78df72a7759f31b1629b99d34938c5970b93b34afff1721cc9be56c265c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fab0c9f6e4785c78841e80286cf83b49

    SHA1

    a9d41e52dbe195b4225a18f3481b22c7fcac9353

    SHA256

    1e66228614f91c5f266c0beb2b5c833a9ed188d1f327ed490e10c472c3455a1f

    SHA512

    f97943787969189f72c1c845bb8ea52ca49e53f37f297a0eed95d832adcf2f54b91fc7c17f76fe0306cc84d9ad02bd70b4f45c94da064a35bd6ca3fd0588ee4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de5b298aa93a8f03580adcd62a598288

    SHA1

    42e72bd5fc83158178e0a2624c6db4e73408dbe9

    SHA256

    7005ab8e0110d8c90ace02b637376d9731a6007b40c092bb474e67eb10482733

    SHA512

    a76199ea606dcfa407936f6942afa4bc0d70a11703da4af90a7d3563536e9f82ece7c3732a46cbadf946deead5415db52373e4921f4e71f1587523ce2213807d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5b25efab04d9f9d077649a41dcfdfdd

    SHA1

    c679f6e2feb5d9ba7b2b0d36d5167f26a078b8d2

    SHA256

    1971fd59764d1c8818af120f277cb4985bce215d1b3824641683305fe3d2c652

    SHA512

    4b9df1e5b4d91aadb8bfafa88154a5a122870ffc9c8e6973ea96530c0f8247eba0da2ef62ef26ba1259bbeab1bc15019370079c6869f38ede863a1fbafa542ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3b8c291ce364d60480a77ea32f785ad

    SHA1

    e51d720ae7bff693cfab3a944a4c53cd9f302a7c

    SHA256

    7385f83ffd9306843f189da2396267a98d0fa52795caff96b2ddcef88ac01989

    SHA512

    90a255c935cddf6458022bc95128ceb76d95776075bb6145023b2860bf23b68738189450f8257a43ae7e33520aa213bd95e502f25158c565bc927b90f3321dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc97876aef377baea61ef99e40256c33

    SHA1

    4e66f0df995957336bacba9f6500bfba1f17b327

    SHA256

    35a8f992ca2c4d750c08ac3a73284988d5b6f7e39a67e8de1d5e962937921af0

    SHA512

    176cb11e6483342dfe1883edfe8d040fe18bfb8e3d5dcdbdd84cc237f4d8b41c94d3357f70b801cb8ee340bffdf9854bd08c2d969d978eade0ef900419435772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39dd9b0efdeb66c89289fe1c81740bcd

    SHA1

    60b24ad37d4d5016dd21a98b3470b36c03b022ac

    SHA256

    13571ae6ffd91fd114ace973b8e6c2b642329d6765e686fac120004b94c86493

    SHA512

    92829ae1a59ce480bcefe00303c16cab0c1f066bd1ac6b70524a5f24c5fb6a3da55490b56c0773a06adff7140eb5c58ec552f4f8cdd103b336443b16f2d264de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d13713101c2b053c65ad0da050700a91

    SHA1

    daa4d7b980f5a990d890afbbebb1edc279563353

    SHA256

    5e1d9e3e5a4eb7f5364469546973c56e766ce5ff85b9f5e80ace3d675219fbb0

    SHA512

    c20044188fbd773611fc52d3f5fa29a7469df6072467dbb7561b4f0d5126c98b6f0d12c017b7ad5f9623e04a70d4e9c1cb44c4a6c744a06d93bd41a413e0aedc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51ad4469a603a0b1a14bde8de6a8754c

    SHA1

    d16c0f93e96eabd0c7085787ef8e3e31edea5c26

    SHA256

    1e531cd37b9ecaa38db63025c276fec51fba093ecb4fa22d11c0b125239a9f9d

    SHA512

    9b0bc833dbf09cba2d89fdc6120b81fc4e7747fbeab709b86aade73d63d39b8d1987a75214ca78d9dd921954826a66174d36c11baff20c928db3bb24db106c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f2226be94094bb9f74f4e49bb0818f1

    SHA1

    94ce21e8cdaec3dcfde11d9fb62a173bf1ab4db5

    SHA256

    a7b28da985dcf4011be468eb845d676e8e2663dbb4f872f9193bab238323c82d

    SHA512

    1b7247346ab5ea7ab8dbbc616b087b935c1ce4aa4c9b02bb2ea2e70dfee4820d19bfe2c631700776063d9327908b813a693f3f804a560723475439a5987a5955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e64b03a94e464d7005c9c40e407d9fcc

    SHA1

    65620564caa1d90a99c46ee2f52e68a905821ee4

    SHA256

    277845c150499903e9545672de4738ab3063ebc000a471c9e4e8780319ce0a1c

    SHA512

    5f744e4ff82d191fc84ea2eba52aba6609b1a1adaf7bceff5ec97eb47333f82a96933570f28500b198ec564cee52298e9d2793e9ea017933ad862ea26d4e0105

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HHT5LGG0\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    70116351ebc507731f11cfb8653f69bf

    SHA1

    667d48cd3c244c41a84302056e5b14140045acd3

    SHA256

    e3fff060584ca9c8eb12a6925252c8c6333622f4e6aeae8417449bf0ae355020

    SHA512

    a69875a52b635e7a561cfe2c7f4639bc122be434989dd39b37ab8dda08b49aa4bfd681c572628e9dc056c69808d0a03e2c6b4fef88db20a59ca73f097870aee9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LPQ313RR\cb=gapi[3].js

    Filesize

    59KB

    MD5

    1d4cb29476060a1b3681fdb681200b11

    SHA1

    d541f88bf8d4fd98b9e0e723e050c47d4d32c18a

    SHA256

    5930e64b0cbf1dc5922f65060422fcf822870ac69439450ee3cb134365a51a82

    SHA512

    85575c3656c8e0d70cbcdf76194e37dbe3f7bd4535221a8f51fb6b51266fd682809fa86bc556c27d127f713a6ff75290ae1fbdcd8e589211e1685f82b99d93cd

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LPQ313RR\plusone[1].js

    Filesize

    62KB

    MD5

    1106da066ce809fb5afe9c6c1b4185b2

    SHA1

    3b64d3a7f52b4c07047fa8727db4207137733bf8

    SHA256

    d0f3af1e716ce7846e7c252ace160c12480d41eecd5a7e7917ee5b2ccde62b51

    SHA512

    3f0205b89d5293f14d863e344680a9d8518e5d4ee3b981dc5981106534bd597ed6b388eecab1385320f77c8d5a46a4ce5b64f03f4377b8ea13ecf9b569878fd9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\2254111616-postmessagerelay[1].js

    Filesize

    10KB

    MD5

    c264799bac4a96a4cd63eb09f0476a74

    SHA1

    d8a1077bf625dac9611a37bfb4e6c0cd07978f4c

    SHA256

    17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d

    SHA512

    6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9

  • C:\Users\Admin\AppData\Local\Temp\Cab473F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar54F8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b