Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 12:02
Behavioral task
behavioral1
Sample
e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf
-
Size
46KB
-
MD5
e27fedf30a28cd4f0beaab1536e278ef
-
SHA1
ea8b9b22d58d7c8f7b4f35e4d2e0f819fc1b4b80
-
SHA256
0abab654be19c4b433ff16c49043a716c4e0da95998b31fd968b961b27f3141d
-
SHA512
23b943544321e7e03ce32993790ce0ea6f666b7f22efa2bdbe129e362666c5eee529b5375a4d889c7ed1c379feee322c3eda01e43cb1e2b4e6bbed8f097f891c
-
SSDEEP
768:HgGzpDpSnOPYmrZsNWpnpfjDXMlx+Dg127UcNKGjaKiOl5PbbVTvycgL4GBZ:AGF9aWpn5o+U127U+KGFis5fNyc8/BZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1244 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1244 AcroRd32.exe 1244 AcroRd32.exe 1244 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e27fedf30a28cd4f0beaab1536e278ef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1244
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD511eef1df5377ab3cac01a6ec7146b193
SHA1ef3f7e78df962d4fcb271331cde79db8a5f8abdf
SHA2566901f3895f79d9547774e82e8942a7d82aff5bdd8776703625132898a7869170
SHA51235bf15d359cc9116d628e03f602729b373dc3a7637c6d14a7dfb164910d642de604e7bd80376fdc7083b57f7784c248d26f150cea4c328e049cb4e90b0e63d52