Analysis
-
max time kernel
122s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 15:50
Behavioral task
behavioral1
Sample
2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf
-
Size
76KB
-
MD5
2607ce9a446f608cb08e3a362ed3245a
-
SHA1
ea8f8d4fe63aaf2e9ae30a64c6cd43f29321f40e
-
SHA256
d50bd3b301ea79a60b6106bb840d94297148b6ad8f3d38f36e069c12375c83a4
-
SHA512
0245df60ce90f48de2d2a54aa6909e25efc75ba13a781ec1e02b242f963e1ba2ed3e1e87780fca9a6624082c2ff4b637f23f9d3a806a93499b03bd94e286bfb1
-
SSDEEP
1536:7WLLyKLEFGUIkoP5wmSlN/exFZiZClktb3eraXkZWbpONiWCoI0MDo:67f79SlNezZi6q3rkbNJI07
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2607ce9a446f608cb08e3a362ed3245a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD577e1796ff316aea8ceb6dca7e25ea710
SHA161d98862fbcacbdfce7e3a3c6f3e6ed0de0a7c63
SHA2564bb5257345d84dcd6b64bb4e907e7ceac59f04f725f6d9f622b7c2fcea4c3d19
SHA512de8f81b9cbf6bf60111434954008da194c1f382b7b71ed9e354d6e040d6c17d71214af5ed15b0fdb8b53f053a9b17782e6d0f1f46e6b4cc3594fd27f05aecc05