Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 00:01
Behavioral task
behavioral1
Sample
1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf
-
Size
95KB
-
MD5
1348092a0ea35db41731049bf9800550
-
SHA1
61f14f958f0ed25c76df7a2ea989964d89b687e4
-
SHA256
9d68aa3cd585afaac68bca536db569eb2c8244687e1d2fe93b6c01c607337db5
-
SHA512
930d470db784e84e57898347e700fe1733ac44cbd51bfe292ce6cab13c4f5e18b191953236b4b52128b894f6723e02d07a78b3984357ad47103051abbac0d4f0
-
SSDEEP
1536:kix7I5TO41nYWFdwPAb45xKCrMOUrWUEEeUo6Buzgo4Ycj5RX1F1kcJIeWTkPnXB:TxmTO4lYAxU5xhrMOUrWzEeUdYYYcjRr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2856 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2856 AcroRd32.exe 2856 AcroRd32.exe 2856 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1348092a0ea35db41731049bf9800550_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d5ceb7f8c5a4ab91b1af309de2fbc490
SHA1ccc23c5e06e39d1d992b2c542ec24a23462e550e
SHA256fc8cf4d9ac94f0067c9f8e298bf7fff1ef4653bede614080250d67a57f4d1bee
SHA51268f0c7b68bdafddb2aac4933dec093bc4d0ab2053c3869db4a2d64203b4df3a634a32f15a773635b66fb1f9b262b5f61281266d74a910a5a70cae9a16682adfd