Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 15:52
Behavioral task
behavioral1
Sample
bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf
-
Size
82KB
-
MD5
bc610e78397117a0c330b42bbf5fe69c
-
SHA1
2b9d8c877055a15094031a7d2dabaaaa669da391
-
SHA256
0beab070966ff51cf2f4c2612b63893d03c59d81fbb4771494bba1ccf8238e0d
-
SHA512
3e400e4bf608812fc73183e9626aacb5e3b2b6d168516d47a2e9289893f298f58b70004e69366e3837710a27fc6b22fc53a2a1b957cea2742bcd38b7f0c476af
-
SSDEEP
1536:OzRUyJFgDYnHbGQWYq5CVNjTYrHQDAw/UgJylVjSWHpOvTWC2R33j68CC3MR2FC:ohQ+HyQWpwNjMw//JyCv068C5RR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2120 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2120 AcroRd32.exe 2120 AcroRd32.exe 2120 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bc610e78397117a0c330b42bbf5fe69c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2120
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5800764d55b6497850b3d7d4ebde3d3d8
SHA1ceb5e9c8cb613370ebe00f805abf897048099418
SHA256257dda8f0c9f7f92fae635030db10b9730890af375fb127f6f2d2962c0ef3b62
SHA5125880f9ad9e0ebd202083d61a45dd15cb0d60e51bac962f1ef2088f10500042d37dd1a5ab80bb461f856d041c34d1359596b4fe7e5c3afbc961dd2baf1cc04393