Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03-05-2024 06:42
Static task
static1
Behavioral task
behavioral1
Sample
0fe6f4dd282e7efb21a9dddf02d8a3ca_JaffaCakes118.html
Resource
win7-20240221-en
5 signatures
150 seconds
General
-
Target
0fe6f4dd282e7efb21a9dddf02d8a3ca_JaffaCakes118.html
-
Size
97KB
-
MD5
0fe6f4dd282e7efb21a9dddf02d8a3ca
-
SHA1
0b57514acb64ac7fc5b5ff6a4ef9265e28c7b026
-
SHA256
31ddaddc18089c3148c2c0ea2004d7eefbb94df9a161ae72d1f167407011c069
-
SHA512
45fdbcf1b802d5fb1106eba03c3882e966eb15ab448417a9ef625b42b0a81afe8fee0e323ccef0f8f8a1821b6dd5985a1c494ed7f50b59976d4afd5233115279
-
SSDEEP
1536:SuU9yUtV5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSnPknal9G+Y6N:SuU9yUZ+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
Mark of the Web detected: This indicates that the page was originally saved or cloned. 34 IoCs
Processes:
flow ioc 34 https://hi98.cc/gg.html 74 https://hi98.cc/gg.html 54 https://hi98.cc/gg.html 53 https://hi98.cc/gg.html 33 https://hi98.cc/gg.html 71 https://hi98.cc/gg.html 79 https://hi98.cc/gg.html 40 https://hi98.cc/gg.html 41 https://hi98.cc/gg.html 61 https://hi98.cc/gg.html 65 https://hi98.cc/gg.html 38 https://hi98.cc/gg.html 31 https://hi98.cc/gg.html 37 https://hi98.cc/gg.html 39 https://hi98.cc/gg.html 56 https://hi98.cc/gg.html 80 https://hi98.cc/gg.html 32 https://hi98.cc/gg.html 55 https://hi98.cc/gg.html 57 https://hi98.cc/gg.html 73 https://hi98.cc/gg.html 30 https://hi98.cc/gg.html 72 https://hi98.cc/gg.html 42 https://hi98.cc/gg.html 66 https://hi98.cc/gg.html 60 https://hi98.cc/gg.html 76 https://hi98.cc/gg.html 35 https://hi98.cc/gg.html 68 https://hi98.cc/gg.html 82 https://hi98.cc/gg.html 62 https://hi98.cc/gg.html 77 https://hi98.cc/gg.html 78 https://hi98.cc/gg.html 81 https://hi98.cc/gg.html
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0fe6f4dd282e7efb21a9dddf02d8a3ca_JaffaCakes118.html1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4608 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5028 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3612 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5100 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5516 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵