Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 12:43
Behavioral task
behavioral1
Sample
224b6d4dc84190b28bd05b1e47c23156_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
224b6d4dc84190b28bd05b1e47c23156_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
224b6d4dc84190b28bd05b1e47c23156_JaffaCakes118.pdf
-
Size
70KB
-
MD5
224b6d4dc84190b28bd05b1e47c23156
-
SHA1
ecd60f9d094835093f62c54fddc795ae09a07fa7
-
SHA256
8ff86b17a326590fa58c95aaf5f182878fe4f02fbf3b3a852d08e1234b95bd62
-
SHA512
476e357dffa2b504aff60cfa97b38ee347ff0b7e4e366130f4973f61adf5add447ec21211c80667030cd05be9c030a8d1e1cc2ff6c0d0e2c15271d3f1fbf056c
-
SSDEEP
1536:cN8joGez/nPWi0hqH+QAToSA3Y+PWypOlLz2k6dW2ktiUz0KHU:S8jFgXj0LiY1lL6k6hkwdD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2068 AcroRd32.exe 2068 AcroRd32.exe 2068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\224b6d4dc84190b28bd05b1e47c23156_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58ba043dd30dbb8cb3b4b759c16d03be1
SHA114fd2125d82679684da8dbfaf373895aab985049
SHA2562cca0ee706d3a571f33aaa224a378fb9ef2a36ffc57e9322e0e3b47acd5e23c7
SHA5128b4631c8a1786098edd3061ed02bbb1ce55d119d9ed9d0412cdd991dba7a1d54b371c2a68d6dc2b52384cd748b6efade41a2a840961f87907407b49940243fa3