Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 15:04
Behavioral task
behavioral1
Sample
08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf
-
Size
82KB
-
MD5
08bb91b9a602127c3809b172484d4584
-
SHA1
4bf85f08ad8567333a519b12ac1f32a475e000d9
-
SHA256
e4867eb937e84c14cc8be5f7fe74fa72d3a696680ea742957e3f73cd25e88e31
-
SHA512
d4865edb6a8b50c9b61e3dd289251ea12e9e978ffe2b0dfe9f6577ee5b878a272d5e08d3f11c5a862cdd6489a0678e2ff0d22627ae20ddb60c3aacdac15676eb
-
SSDEEP
1536:6UGNuxvRdi9NBcmU/gYNuiG74y85If2moYZOabv2RG62WVfxfem868JCI1LWspOe:3euxr8uDNSb8eemosOabOG6ffJFG+Sj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2620 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2620 AcroRd32.exe 2620 AcroRd32.exe 2620 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08bb91b9a602127c3809b172484d4584_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2620
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52922a23464793c88d59bb19b2708c010
SHA1dece4cfe8c1fec43ab46a44e5a55f8548837e3a8
SHA256d166a6c755b4f7616f398c9fc59bd5e969ffc4e685264148e1c1db32cec7c025
SHA5126423e8435da7a912e02f7d55e75e109d512ae89126e5da237012132bc9f9a9c432824ea82e3b48fba3c52b11297c05c0b187cafacad711c8f8a93560c98c9b1d