Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 19:01
Behavioral task
behavioral1
Sample
2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf
-
Size
79KB
-
MD5
2a311645491cca0c221e421c54de303a
-
SHA1
b4bab85ea305de8253ee29941fa9e4e22859ebed
-
SHA256
2dfe4f4cc1b0a5635b5aa7d7f4022f4daec9cb0a1cd29f939949ca1424dc79a6
-
SHA512
b2ad855a1d561983c5f75bfcc1fc5b8f5e8ec49fadfc62b88dc8b5c9e845428cffae6453cfac0a3c905f47e1f14f534645b8e4ee191895c7f52633c19e82e7ad
-
SSDEEP
1536:wAcxIgRd7IgA1aK+7J0aVH3/E9n4Hy6WkNpOPaW1x4oFjn2b8Ty+VZTpTo:cxIgvnmaVXsn4Hy/PdPjI8Fm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2224 AcroRd32.exe 2224 AcroRd32.exe 2224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a311645491cca0c221e421c54de303a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d07c4f448594a1fd1ff4a291d4560472
SHA13626617ea3fbb0f9286bd827d5f50337f0a6b1e5
SHA256d934f74269c60860eaa383d9ab1d09d75f37476a15d5eabc9b1e21efd33ab1f5
SHA512fa63133d4c9b99727bd095a126e08b7f9254fbb8e57ec72302fd43b1a5ba1bb9f734a152fe398c1893ab46c4a77ae53bbc8b487f55e47d4a6752e520ad9e63fa