Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 13:47
Behavioral task
behavioral1
Sample
f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf
-
Size
75KB
-
MD5
f5ea9c891c7bcfb59ecc9de260138407
-
SHA1
f708eb5104e3e16b6536d067feaafac37f37ec88
-
SHA256
9a7e9e8a4094ff5a7b78f65c26d0bd27d8c2c71be5f61c2be712d053b78ee12d
-
SHA512
9b640882ebc12469c2dffb75a6190241392b14f2633d35013a1da91117e392dbddd660fc270207bbe592b463e4b2b65f36c0c1b264c57f2f50d74d7a2fe5b1d7
-
SSDEEP
1536:78zH4BT8g4fzDHfd6IiSf4RPvxZumbikr5PWtgosiBajbG0XWWApO6ZNG:y4TSfgIPkZZpik99JiYjtXd62
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5ea9c891c7bcfb59ecc9de260138407_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD507c3d8ec11e7ad6f961b57b455d6b430
SHA14036971b59a1abecb58e1744460dfe9bcc57e159
SHA2568b9b1f7475b9d0940508b20619185cbe0e48fa827e4de62b178b10f3c4a427d8
SHA51272e8ab4caf5ca956247654d20cca7fec87499e3b016e5a904d3cbe6dfcecbf0546d4f70fe1a6b9dc8bf3d94fc08258d128ab9fef80fc2d9acb54c27d764f6c6e