Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 20:50
Behavioral task
behavioral1
Sample
c26befd6752abc50d104f53d4ce5bf48_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c26befd6752abc50d104f53d4ce5bf48_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c26befd6752abc50d104f53d4ce5bf48_JaffaCakes118.pdf
-
Size
67KB
-
MD5
c26befd6752abc50d104f53d4ce5bf48
-
SHA1
30b3c2c832784ab0b97ed87f53e5de26b384ca8e
-
SHA256
d4e2a5e88360c804f46a274aeb98946e89ef03c3e84c149907330981e3f70fb7
-
SHA512
8e1f0c9657b92488df76618ad21acb35d3964cf4d3b4f11e3e2800f42b569f364a4707a126374d34284ae3012c39d269ccd717a47435bcb7b253f05b6420c008
-
SSDEEP
1536:ChigrKkS4WKwewn+qAaKpOwJKWwqzbs/u8JZWbpONEjph:Cig+kS4WHr+qARYKDsBJbNi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2628 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2628 AcroRd32.exe 2628 AcroRd32.exe 2628 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c26befd6752abc50d104f53d4ce5bf48_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2628
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b301148e79d508e35feaf705378ad494
SHA18466293239086e735f66231ce0ce19314f54c3cc
SHA25646fad6905718975a0a3a14d2e69e8643f0ed2484196d1a58071fbde4a45306b2
SHA512334f5da5c144cb9e56e81d3040d6c72419ecd637990f3efd175aa81b07747cc82cc23a0a7d15ee84645e6c87298d9ce623606d2443d293a4c5863bb538f293c8