Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/04/2024, 08:03
Behavioral task
behavioral1
Sample
ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf
-
Size
86KB
-
MD5
ecf358e283683186fca9602372538e1d
-
SHA1
df9f6b23af07d946006bea35a918d670ee39e015
-
SHA256
5d59e692b167a0448b65f2befae8aa0d90d1298aa514eefefd7245da816bb872
-
SHA512
a37159df8a7573452a1f845831f595defd5264b45156dba12e28421c7f1ee44fe13f9af8b65e6f496c448d61e55c0013810e031bbe75675bea7f0953700b4ed1
-
SSDEEP
1536:mOMeQgVDuVCYwfW2fbWbXdEOH3ZVhDOX9/nsy3rzjMsn7Fr7fCYu7fwWZNW:ggVDYCYwfW2fYdTVOX9Psy3rzjTJr7fD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ecf358e283683186fca9602372538e1d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ba5d1e71953fbfa3e65843a2458eb92b
SHA16cd25ec501bc683d431ac9771bcb2e0f8a0fc19a
SHA25694fb56c9f8d9d90996dfe32ea3fa66984032c852dfed65288c95d28252796a7e
SHA5126afe626e7b102a9632abcb44e060835de314d515402b5d550e5cbe07ede09975d4f81495764d04b1c3c09853bb71d42af5ecffe11408e56db55b3c81162805fa