Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 16:43
Behavioral task
behavioral1
Sample
273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf
-
Size
80KB
-
MD5
273c4391509e33db0277b897df36e02a
-
SHA1
6528b0bf12848039568c9816df372c89b575f60d
-
SHA256
f55d62156fb164ca945c5f946e7a0d4ae116efb633915c33cd52502bcd003371
-
SHA512
c5148a7368e4483d7742dc59fafc6ef838e02279b99ff7b80af28d6b41ae8a01ef42c15e3eb9daab1f7dc87dca49003050c5b3e9192869cf06229fd7681e6321
-
SSDEEP
1536:owifGRmGETlXtokXEWMviHrAbUUXHNr7CVbjz2Wxa8xUjnahW8pO+Xid:OfGIPTZtlUVKHrAb1X2fzjaQUjaA+s
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1692 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1692 AcroRd32.exe 1692 AcroRd32.exe 1692 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\273c4391509e33db0277b897df36e02a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1692
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50813939925444f572baac4c1fdbf9c62
SHA143af8fb98470e3ab0ea3cfe10013bcff4d9ae1d1
SHA256333c947cfa42e9ff17d6e71abc5b1093b6ff08bc49fd7895de2385563acceb4f
SHA5122eaba74f575979d85f88aad9e02ec195e9e6e816a24f8adb15d54a7f4ef897ce2a5b79d1f0a7a2d7e7f740852a5a9ac79b29b7df5021b2f51cad458f27cfb74f