Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 12:20
Behavioral task
behavioral1
Sample
e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf
-
Size
34KB
-
MD5
e77282aae56e810c599a34ed6b37b53a
-
SHA1
b9399cd0eb2ead9070572071c347f1b75f914bfe
-
SHA256
43b58e61d6f0c57b22f4f3a7f17edb9306ceec3385a81d0fc36c4a6bd28ac745
-
SHA512
983d4fa8b580daef9c11930416bad2a3b39a17f4de8d8b5da35cc9c0cf845369eec57b58ac0d44024bc189e634f571f2f7a2b5801827cdf87e70a7dac8cbe814
-
SSDEEP
768:NgGzpDTOExuz1MGbKs1utg6g6k0+2ylue9+dypdXPOcz7z03fDjjs1Y:uGF/OEA21cfpdX2Eok1Y
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1532 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1532 AcroRd32.exe 1532 AcroRd32.exe 1532 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e77282aae56e810c599a34ed6b37b53a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1532
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aa2860f86f7532257a42ba5b63c24408
SHA123776aa00e83c3a6a9e246bf9c3496866ccc3d27
SHA256a91b74749e4e72be844651332ecab512340bffd698fa913b124fb3d80e64c56b
SHA5126eb2ea5065e6ff506b6e6c0b3e265563e3090ba98fadd3be0ef239f19261e5ec3e06dc205e68939f89d5883123980ba10fb28ad2c67fa4b002ae47d76c7714a7