Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 05:22
Behavioral task
behavioral1
Sample
cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf
-
Size
36KB
-
MD5
cbfab7a75de14919d25394d041baf20f
-
SHA1
1e9a4a2226a2f29b288981462eec666063fd0c61
-
SHA256
b671a531c64e1aa11c24df226b320afa02d58f35798980e1fc5aa3fd30d7b986
-
SHA512
5affa5d735d64aff96a6cc434428135faf172b67f3296d3dc529e48c9454d3f6c5ddcf6bd616750b64f39822a07b84acc8e461004879c72bc8ea33980fa5237b
-
SSDEEP
768:nvp5p9AdxCIyNUGW6PTsNDUhOcR8Vr3znAOMUTu9F+Be:Z4fMUEPTsNKiVrzA3Uu/+Be
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2900 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2900 AcroRd32.exe 2900 AcroRd32.exe 2900 AcroRd32.exe 2900 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cbfab7a75de14919d25394d041baf20f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2900
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f9f73600269bd342d41a34877dc155f4
SHA109b3686c83d55cdf04cfe46fb98ec2c239ebc1e9
SHA256996eefb25205b1bc1ef62ed4b49f3e20c8ce060fa87c579140124bfe324b1b6e
SHA51279d11e42e61fa7e3f193c94d742905d29c549d76c8897c2c36e8fde1f52b001c97605ec2afc93376948816b142616ab2a53e861d977efb087b806b7cf3d0a4d5