Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 12:29
Behavioral task
behavioral1
Sample
2204127d998b836859f75c3307087058_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2204127d998b836859f75c3307087058_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
2204127d998b836859f75c3307087058_JaffaCakes118.pdf
-
Size
68KB
-
MD5
2204127d998b836859f75c3307087058
-
SHA1
4660c9fbcee9db2b1cfd341f89c68935d8d09479
-
SHA256
10601321e946c560dfcade60c8b7d2661e1a833561de3690450358e58869feda
-
SHA512
37ba6210b1757de44414808d16fed10db1d2a818fd40d82da9602d0c3ed8dd20449c796640d76465f344ac8fc7670825fd06d66595621f5662b91b4422a7980b
-
SSDEEP
1536:eyko1/pBNogDdF/wVqPm0czWsa7Ok65ZB0ypWUpO7E905s:Brp/wIhceOkeB0yM7g
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2204127d998b836859f75c3307087058_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52460540be3de1bf2be7dbaf19979c0ab
SHA1998ab182aba48b495e03d7c959388310312c1300
SHA2569f079813534c2f4ee9b67ced72f589233ac2a4f30f7b4625d69b768e7c03248b
SHA51216367a8a39d651606aaf934a5c770330c221acff941551857cfe086676ec86ffbc348c0f25cafc5e377d31cabb2f9297e675e26933376b8977852fb983cff7a6