Analysis
-
max time kernel
140s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04-05-2024 16:31
Static task
static1
Behavioral task
behavioral1
Sample
1390cf1500cace60f1ac1c8b43cb7582_JaffaCakes118.html
Resource
win7-20240221-en
5 signatures
150 seconds
General
-
Target
1390cf1500cace60f1ac1c8b43cb7582_JaffaCakes118.html
-
Size
15KB
-
MD5
1390cf1500cace60f1ac1c8b43cb7582
-
SHA1
848cc63229b7269820e72c471657b4528a476644
-
SHA256
7cc0f20464af860c67a3cfbef9c8959cfa56906bec7e84cd9929e10da8d53d98
-
SHA512
f0ec68a717faf4423c3f4b4882e8c508eac109df2cd9301109c8e73e4983a3fc0653ce8b15cf9e9e8986b6d8092c217c848be207e6f8282137485781715d0c47
-
SSDEEP
384:SIlwk6zdi6OrVFFUjBQVxkHudBGVlDDYC/YjX:Suyzdi6OXX
Malware Config
Signatures
-
Mark of the Web detected: This indicates that the page was originally saved or cloned. 49 IoCs
Processes:
flow ioc 36 https://hi98.cc/gg.html 60 https://hi98.cc/gg.html 70 https://hi98.cc/gg.html 57 https://hi98.cc/gg.html 37 https://hi98.cc/gg.html 86 https://hi98.cc/gg.html 44 https://hi98.cc/gg.html 85 https://hi98.cc/gg.html 40 https://hi98.cc/gg.html 66 https://hi98.cc/gg.html 73 https://hi98.cc/gg.html 69 https://hi98.cc/gg.html 92 https://hi98.cc/gg.html 42 https://hi98.cc/gg.html 53 https://hi98.cc/gg.html 59 https://hi98.cc/gg.html 67 https://hi98.cc/gg.html 50 https://hi98.cc/gg.html 38 https://hi98.cc/gg.html 72 https://hi98.cc/gg.html 45 https://hi98.cc/gg.html 94 https://hi98.cc/gg.html 76 https://hi98.cc/gg.html 90 https://hi98.cc/gg.html 35 https://hi98.cc/gg.html 75 https://hi98.cc/gg.html 41 https://hi98.cc/gg.html 52 https://hi98.cc/gg.html 61 https://hi98.cc/gg.html 46 https://hi98.cc/gg.html 51 https://hi98.cc/gg.html 87 https://hi98.cc/gg.html 71 https://hi98.cc/gg.html 39 https://hi98.cc/gg.html 64 https://hi98.cc/gg.html 63 https://hi98.cc/gg.html 74 https://hi98.cc/gg.html 91 https://hi98.cc/gg.html 77 https://hi98.cc/gg.html 54 https://hi98.cc/gg.html 93 https://hi98.cc/gg.html 43 https://hi98.cc/gg.html 68 https://hi98.cc/gg.html 88 https://hi98.cc/gg.html 65 https://hi98.cc/gg.html 95 https://hi98.cc/gg.html 49 https://hi98.cc/gg.html 62 https://hi98.cc/gg.html 89 https://hi98.cc/gg.html
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1390cf1500cace60f1ac1c8b43cb7582_JaffaCakes118.html1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=3880 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4160 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5352 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5444 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:11⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3632 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:81⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5424 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:81⤵