Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 21:13
Behavioral task
behavioral1
Sample
10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf
-
Size
86KB
-
MD5
10215a89adfedc556de16d752b50b857
-
SHA1
ad1a6fade1bdb95d7790a1a7ee7628e98dc6a34f
-
SHA256
f2dd50e883034909a2912765bcad4b44e9d27fe5c095c07fbabf312661cdee04
-
SHA512
389975796537a4a283f0400cea7af811e134376e7b78154d8d655b73dcb8e15f15667cfae92ef044cde24d38a6164611ef41fb245c2cd846b694a6be47acf92a
-
SSDEEP
1536:3yZufbprx6/fJV8jFpyWBP2t5zq5qYWCpOViIW8c6Ksluw85vkXjWo:Muf+nuBetKGVisXKsHN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10215a89adfedc556de16d752b50b857_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cc30ab95e107d9e4f454e76c248dc088
SHA1bf7fffd6728c4c299d59cfdf6c2544e8631f7048
SHA2564979b5e36233c61ab7c2983f7c99302c6126da5d90606347c92b23ab5b9231b1
SHA5121e4d77bd6db6d7a357f993566b7e90e2fc52de2bcba72fcd9d77984b7a13197788ab806c5f7278c5a83a260348b091a64531df6cf4c28ac1cb05eafee59f8cb2