Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 05:43
Behavioral task
behavioral1
Sample
f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf
-
Size
83KB
-
MD5
f071f8845904ef0ea973b363732facae
-
SHA1
29863c2f357173db0056cd3494cf74f81314d98c
-
SHA256
9769256c6008f0beb9e89aa14556ddb7d8ab3f4158d6b794b106674c88570e26
-
SHA512
cf5e06b43179adf242df7d7b58ab77637623962b9b09bf86b64c76ca45a17b25ac8f565f22ad383efa149d3d3c45212560d7838a04aeff2931bb4d974c5c237f
-
SSDEEP
1536:eklXAps71TVFXz9m970e5t3eO9TsyJDOp7MhTGB+rtg0d+t4jCVgWypOlL6O4p2k:7X6sFxm9v5peO9BipAxGB+rtg0d+t4GO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f071f8845904ef0ea973b363732facae_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e872ee417fe68de4a547dcdfb1b46cf5
SHA12f0fa38a3a732f1407a00ef527574ef6a613a9f1
SHA25608b855ece9f8e05decf3dfe491e12bddf35ffa411a5f7fd0a7c2a48f739bf06d
SHA51226c72539fe38fa18280c254c6e58de69face64470b5a2776376605cbdcedfb500cd6fbfacf19f39846fcf2760db76926658761569c062db1c43d1b11c01d6947