Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 22:01
Behavioral task
behavioral1
Sample
ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf
-
Size
78KB
-
MD5
ec158db3faaaafba37a253aeb8e058bd
-
SHA1
d4b884580c1d6c7bb7af88102ebd655a1046a460
-
SHA256
6f64657d1a588ca2baacd1498a164dc2d19a0701bd3c0e927cbe9df96e77d4a6
-
SHA512
f5d05af00ce57844243dccbda54db99d0e5574481ada62df39b76b72d77cbc215f3e735a01add878e80a0a370820755e324def82d7a6c431c637a6928badb453
-
SSDEEP
1536:8nSM2g5lVXKVpnjLBpqTs8OSznOgCtrEvu+vXrIgpYzsCWGpOKq/M8hWW07fO8Z4:Tg5lVa/njb6lOSbOtQvusSzsrKx8hMBO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2592 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2592 AcroRd32.exe 2592 AcroRd32.exe 2592 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ec158db3faaaafba37a253aeb8e058bd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2592
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58161827e128b2be3bea49b524d14de94
SHA1df6bff0679c4227062d3ebac015cbee88f5ab8c4
SHA2567dbacc754901d7a9fc65a31044f3c81b4217bb7ba2032a0333b815183e7b896e
SHA51256f814e2e3c20204f3c0ac3f6e2fdb2e965410573e8162cea4b269b43b441db994a97b5e87ec00ee584df56fdfd5312ffc8851d118e742a23e934edb83869cb7