Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 15:48
Behavioral task
behavioral1
Sample
260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf
-
Size
77KB
-
MD5
260160f043863aaadb2994d130cf1e96
-
SHA1
dbd4512a33b44afb919d76b1dcc49a018b75bd66
-
SHA256
204ba82d9e87c611b4d27d8b411ecd9b6a7f1c0d630f61a827d03a31a5ff6f69
-
SHA512
836a1ef872d6bdbe383434672ff5169484808b4d1884681454c73e94a0d196130f1bf7432b7748a295133401b0a1e80140c22225a6dedc7a66919b7d962ee514
-
SSDEEP
1536:5XnPVDoGvcoGXI0OCQ6AfQlcNMpz1/IF6xddN8AYwuOfWv1Z4uWcpOmTPX:NdEGiGF68dav/7xnmAJuOq16BmT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\260160f043863aaadb2994d130cf1e96_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD574b82aa93ba4f05ff762b801a64f7e52
SHA1b63a5218ca2cfadba9f78fa891071cdcb5d5487b
SHA2564f2ed422b9fee7d2ce3fb6e00da5753168e7b282291441020a6cc8984c6f8967
SHA5125a823efbcf1b6d38491057ee0ffd35efb6fecf05687278e01398f8b36ae67e936d611a42f80fa1f817825d1610a71b6787ef329bb3ab0d01f595a05260dbe8aa