Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 06:52
Behavioral task
behavioral1
Sample
1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf
-
Size
89KB
-
MD5
1b70e7a18e6414121993395dffa28590
-
SHA1
cb380d2e344e4131e1f2e5025950a3a17acdd58e
-
SHA256
b05843e41207551ca630324ff43946ab24ff420edaf2ab9cde5c1c6fffac66f7
-
SHA512
8a44f0afbe18269906a2341c396128da1eb820286364a53e6e2457861f954f63d6fed71ae597afd18f6ed3034ae37585a6342fa811e9a84724c37d109e76ec60
-
SSDEEP
1536:vcxop+Lu7VI2c2v4cSTOjCbOJHTYyufysR6rwcEtb8H/AkY63Wfj9rEuYz3CLuay:0xop+LONCgCb6zpsIwhd0dvq7YzCLx03
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1928 AcroRd32.exe 1928 AcroRd32.exe 1928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b70e7a18e6414121993395dffa28590_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54c1a7faa4a1a8eb4e28da4e0a3f8527d
SHA1375c918dd74b05ec5c5dc53eb6129ba1f778bafa
SHA256222d82304ff071a4243d1eb33388f8ca00dcb598a2fe9eced673c923bffbda81
SHA5124a1d5357f3fc877961aa5fe579603ffdc3477196a6171bfa96041b3aee98fe52c33c322d8606a182ccd4996f43f41b5aa102cd2267743d8bab8a27926a0d25a7