Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 17:31
Behavioral task
behavioral1
Sample
285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf
-
Size
68KB
-
MD5
285095ddb85608bbcace30a1dfde258d
-
SHA1
e89064396a246ec8deba45eb7fbd0e364b13b83e
-
SHA256
50b326f6b63461ea75966695fae415c98e1f968a4f5c5410295aefafa846253f
-
SHA512
31d0953855e6a95a730b15ef441c3c0c2d17ed04d569af11d4cf43d5c5fd3f6d1100ebf01263d0969e6819aec81c3ed2154c75beb97f5cbe864f1eea530310b2
-
SSDEEP
1536:zHDmwXHlV+oquhe2TOOF1PcpssnLZgvEbLWmgeWkNpOPaWI7KRpli+XHdZIZ3+K:vmwVso3XTfuzqvE3WBDPWypTXHdZIZf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\285095ddb85608bbcace30a1dfde258d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5662e04a535662ce6da9ef3b5e1c4fe17
SHA122aa210e5235243cdae7892f988b5d930b2c8792
SHA256c2cdffe61ce676382bacade3461de356ba2a7d350c3fc3564a2c84d2089730b5
SHA512301b62f9a98b97c0d5230e76741cafbd11b5160b2726713708946747d56d2c9f2329af633a4c49b382acacd8511baf2cfb373523973336de9821c47e28508c51