Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 11:20
Behavioral task
behavioral1
Sample
f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf
-
Size
46KB
-
MD5
f0ef7a80f216afb7779085be037bead8
-
SHA1
e7da258ea74f88561110678d52195c81c3970c78
-
SHA256
e473cc897387c23e58abb4a0e40725a873e56db782bb5bb359cf53d2e4724795
-
SHA512
d49146c6ef88c131ff8ac4faafbaa061bb4ab1e189c5d76306ba61c6ba753197052ef57cafd8013a80a4f312726ab89538e3d5edb3842c9c52678f39f6802aa4
-
SSDEEP
768:LTJGHkzXXa11H4DMnK46DZphQG+Qps0/NlGNGeZ1iAVFD0+VQvQW70e7sB4Ts:gHoq/Hg9DZTHpsSN5AVFgI/4I4A
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1724 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe 1724 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f0ef7a80f216afb7779085be037bead8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5efe588c9487aa96d2c7ef7de95bef1a5
SHA1785d5de3ebe726403c61ab1fdb1d39e86e3524da
SHA256619a213026f195131f6e2b7f32d8fd0746ca8847884f36a54e4f976baaf3bb65
SHA512e975ea6803bad5e3106a87cf104fdff0b8a19449e139cfd95b9e6962065cab9317ec958e6c2221edd36e99176286152504377ec6401421839be27874032855ea