Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 07:06
Behavioral task
behavioral1
Sample
ccf8ef644b45e878912dd584520ab09a_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ccf8ef644b45e878912dd584520ab09a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ccf8ef644b45e878912dd584520ab09a_JaffaCakes118.pdf
-
Size
36KB
-
MD5
ccf8ef644b45e878912dd584520ab09a
-
SHA1
9ed074104deafbbbcadf6b8137858abfef43d8c7
-
SHA256
0f1a2351d1d733d5b1eb6c9684c9f2b5b454354595864e344291d98b0cd305a3
-
SHA512
d153d67b09538cd0b3424b3eecfd30d05e761df4b89a07ffcd4f9ce017cdd2b15ada840fb8492c231f1ad54ba9db8a0a1b9ad06d9d5ea290e80ce67af0ba47a5
-
SSDEEP
768:QU0pSOTdE/t49d+2t7/uys0st5HSJccakY5XVyCmxDPS0JWX:gdEF43+Fys0sDyJc9XVyWkWX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2984 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2984 AcroRd32.exe 2984 AcroRd32.exe 2984 AcroRd32.exe 2984 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ccf8ef644b45e878912dd584520ab09a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2984
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bc5725385eb7b316179c2b28f8f28cc8
SHA1764beac6f1b7fc80d036f3878469ac923e668318
SHA256fff8d4c1b1cbedbef06c5c0df5ea62445cac68586a72e67ccb4ffdf03b66e5a2
SHA512573d94e51c38c5b64009cba6fdbd1b37273df4a035f95211a809498a8d8c65fd420ce90de5c8a37bdf672122d17ef11a2c5e481a6a069436f5a18dc3017d9ad7