Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 11:31
Behavioral task
behavioral1
Sample
048fb7a3167450ca02808edfacf5dc7d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
048fb7a3167450ca02808edfacf5dc7d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
048fb7a3167450ca02808edfacf5dc7d_JaffaCakes118.pdf
-
Size
87KB
-
MD5
048fb7a3167450ca02808edfacf5dc7d
-
SHA1
11fb2d89f46a35c89b49860400c0be29d1df1488
-
SHA256
5141580076a7177952ba49a03f97b6600c5b904103775ac7525210fdb188c164
-
SHA512
2a62f739eef523eb91285422c173fcd8e51d0aff6fb62f45f7adbde1e46ebfffcaba521dbf76366cb19fb30b27cdaca05cd2f25744ba760596d974da9e810883
-
SSDEEP
1536:tnyDlRkKRZoR4r1rhIA84ShdlFvOkNBwz6au11OkERWA6WGpOK1Cb8cceEahWm7y:NscqmR4rVilrlFG6wz6ad9njK168ccd3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\048fb7a3167450ca02808edfacf5dc7d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58ca9059410c2753e2c79af7fa682cbbb
SHA112b40a6e9717790b693b54ab8bc9a1059355597c
SHA25695c49a12eb6a582eecbda6982a1ea072dbd4721247f10ec1b7bcfe6e4e1720e6
SHA512e9c07cbbbec85938306342dc1b55355c8a7941b0d7d7921d1beb9d65a5db296cdbc2a5f832cca787a5d6ad037c09a3f4507eb50d4d5274d7e880a6389011cbdd