Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 16:11
Behavioral task
behavioral1
Sample
eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf
-
Size
88KB
-
MD5
eb75aec69f4416daf3e5a490813c3809
-
SHA1
1c99d2f311ed44597d7ed33e1a6c16e5d3e42ed2
-
SHA256
acd15ad291fbffa50e0cb6a42a08f1a9ef994b36c05f282a7b324bcd416d1506
-
SHA512
bd8ac81cddcc3ff80b435dc2819bf8861fd3e930161a60701dcc6e8c68801467ece5ca523fc04962b3b9499fc3036709987989ef36648f527d97d32cbc1a63e3
-
SSDEEP
1536:Wr5C515Y5QWUtCaS2ufcsukiLHbrb9CsZAhb7v4ukuF+feqMbBLPfaSvqn71qTDD:q5YY5QW6C72ufce6nbnZAhbj4ukuF2e1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 844 AcroRd32.exe 844 AcroRd32.exe 844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb75aec69f4416daf3e5a490813c3809_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53f517cef61ab647f3dfe2fb0a3c0efcb
SHA11bd0ea403ab185a62be0fde93f2e3aeda4d8de45
SHA2568c66ba94977d8d35b1617d90f89ae5470e6b46eb18ba34e2b967383299548688
SHA512c572aae1a83efa5a2edbf3255831f091b1d87ac3490a3598195511f7a91f4e134947fcbc3efd74020a40a1793b5d13224dc9a2f342b6d9b2180fb9eec7e3b53a