Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 02:33
Behavioral task
behavioral1
Sample
f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf
-
Size
75KB
-
MD5
f27be865521f023974c4a645db5a1214
-
SHA1
de44558ffe74ae1e5aa2a0f2fb4e8a7befa3b882
-
SHA256
9104b31f84793a58dcff1b64727d63bd9ad9abd45136ac04cac533ce193848b5
-
SHA512
4c3218dcca2732cf90f2e9d6153b3265a4fadfc8b02dca0b9a3b63a54d8fa11c925c9a2d91bdca374e4235349efeea1819add0614efaba1b4a0d8c78a46eb672
-
SSDEEP
1536:uuykswkR94xy50bHMrDUbwpQVvbGte5N4ncvT4qnut+alM28VgUVrmJWXccbGlq:VyksXR94xy50bsrDU0CaEQkdnut+E18L
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f27be865521f023974c4a645db5a1214_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD577d5767a1de8ebc2d75b57051b27da7f
SHA1919fafeaadd881754b45e9241b6aa8425b28feee
SHA25659915c0d0a80a1bd584ccbec04d7950120f45fb5c49ddbe16e683ec0bf9d9401
SHA51282d347176656af01e0b98fabf6d353517cbc933b90341d271e3f3073caf33f0a503d4c76f6fe2b65b1f654477db62d25986201bf671964dc7e2e162069d30c7d