Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 07:34
Behavioral task
behavioral1
Sample
defe5699835117766b1d723d56570c94_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
defe5699835117766b1d723d56570c94_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
defe5699835117766b1d723d56570c94_JaffaCakes118.pdf
-
Size
82KB
-
MD5
defe5699835117766b1d723d56570c94
-
SHA1
edd704288ac90ee6fea21834c13d32d7dff23b64
-
SHA256
1c4570f529191af4310f42d49b43662fb8b13ec74be7c4f2b76e48c4c386ff4c
-
SHA512
39087240c2c47fae0d4807010aea634619837bf6a172e7ed80031e1da899c74ca15181dc31efff0429257f36e43ac6908099e744bc2f23b09afce3b53a363430
-
SSDEEP
1536:3X7lNDCVczVjg7b9w70JIv9Rma6H2J85RWnLqD7ZpcW6WyOC4tkIgPKWspO2Blw:ZNDCVczV07be7kIvx6WJ8qk0WMb4tFgH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1888 AcroRd32.exe 1888 AcroRd32.exe 1888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\defe5699835117766b1d723d56570c94_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50bcace1ebad70e58372f9c126daf4e4a
SHA1fd196d22c3ca88accc24349b960c31c43fa6c7ee
SHA256a403f6dd2d9e0abaa1912c744c6b63dcd998c55beeb0a9673551ac6f8accea43
SHA512c29c45cfc48283f48a654549b410bbdca938c73c10677c4bacdfac031c1b8f71c8f9a94df11b9da6d311a7cb2c3f611159cf49481031b360114bf3fc9df7d87c