Analysis
-
max time kernel
122s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 18:02
Behavioral task
behavioral1
Sample
ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf
-
Size
72KB
-
MD5
ebac44334052fac9f12863d50da370a4
-
SHA1
6b51d95c3c9b92664df5b888fcdf724bf796053d
-
SHA256
53fdf1933406b2461804be46328aea9d319e5a35ae38090b750df403968a0960
-
SHA512
01a22b4115c5c553c3757183db1134e8c56d7a139f3a4d16424c59b3bce07120621a70a97e54a9fde452e3d2720968f9f682539b3e48b13a74d4789334a7197e
-
SSDEEP
1536:Hf3XxeKiLausjPbcWm1WypOlWWxuH9ffwHHASq:/3UFbWjcWm+lDuH9XCH6
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1968 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1968 AcroRd32.exe 1968 AcroRd32.exe 1968 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebac44334052fac9f12863d50da370a4_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58895cac95b58aaf1c69523622137f2d8
SHA1293c11e42f51ad5d60fd54b0080a255fc5deca51
SHA2565e61dbcc21505e7d83b5edd3c3653bfc09fc186c3cc5f8a05872ea2ecd1e8bf4
SHA5124b16605327489dc842fb7380c4ee2313055c001c324af1568c9de65e0af64b9978b5033a3b08c2dc7e2bb14748ff506f9d9b8fb92e179028cb026047d08686ae