Analysis
-
max time kernel
117s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 14:00
Behavioral task
behavioral1
Sample
eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf
-
Size
94KB
-
MD5
eb3aafaf7ca0454d779dddcc4d347937
-
SHA1
887a13bc2c298d1ba7973d2d3c175dcb1daea837
-
SHA256
c63f176474f8feec686e2cf5059d1223df626f585a4b6b7624085d308c6229a8
-
SHA512
9b07b1a5f00069ca99f0405d86c318664c499ac1517c9a2e516b0d3abd37357a1a2f5a3da6102ce7e0a1530f9f4a25ff307dd65ff8e94bc74b6b24315653f698
-
SSDEEP
1536:wDllkNxE5QB8VVd0bu+tTgalTisVJj1V3Nd8CYZkkZWbpONOfO6W+KRflhN4m:O48CbWGisj1VnFYukbNOmMKR7z
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1048 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1048 AcroRd32.exe 1048 AcroRd32.exe 1048 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb3aafaf7ca0454d779dddcc4d347937_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD504b6cc1bf397ebfdaccc4e3a38d525c6
SHA1bfd2d10a517b5c2fb2234a52a217719a723df9ad
SHA256809e204de307b1882286e80ec7691c67b054e7b7bb40978d645afa41d416afdb
SHA512c0ef56878546f62ac8663d25469eb248f01de18454a35076e53e7a51167a7deb97a2ba6a99d9d3edddb0f99c9ce9eead4f01f4b26949721c3ef7a84b6ef463e0