Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 21:41
Behavioral task
behavioral1
Sample
10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf
-
Size
96KB
-
MD5
10c7134c6b44a1a2c0f86ef55baa3888
-
SHA1
9f5775a81f06cfbec287b476917943ccc79c154f
-
SHA256
1499c7b5fbbf309276117a988f1f88a6e9b7d33567529ad9ae28aaeabc4e6232
-
SHA512
69aea35e6cc65b6426d6c04127b412a841abb0273d0c0ea9f2e30b9133be7394e70bb22c972ccccf2ac8238c85e9959960968926a2a039a678cbefa0c9e8cd95
-
SSDEEP
3072:VL9VG65yXL0bL5mjZARqad/YMhPZax8vYoS48ZX:VL9Vzy78Lce4vH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2948 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2948 AcroRd32.exe 2948 AcroRd32.exe 2948 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10c7134c6b44a1a2c0f86ef55baa3888_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2948
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5093a21f4d866c334961570dfb4b2abda
SHA182c0802bf61b274687e39db4aa51592b6e98d9b7
SHA2566d0ce33e52219e177495084a6261fa5cf547efa2fb2f6b8d48032b41719b2daf
SHA5125511d690011e5e97ac6323bc65b07b0497ae3b40e9b02e959d089dc7d0efa4006bb8fd7f4243ac1f042b0e576c8c92e0af6d4cca9d5ea058046cc4055d7c4372