Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 15:15
Behavioral task
behavioral1
Sample
f611078b32a542d50bf0866592130008_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f611078b32a542d50bf0866592130008_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f611078b32a542d50bf0866592130008_JaffaCakes118.pdf
-
Size
33KB
-
MD5
f611078b32a542d50bf0866592130008
-
SHA1
258d3c3dc29f16a4fbf39541f427d08e71ddb472
-
SHA256
8382d9ccbe3d143d5b98a0de3af4b512a1e7eac3254382d78bc0a0927c7cb7bc
-
SHA512
bda344c4e7cb7db83c7529f836923cbfe24928992241ee0fd85d644c1b39efe2cef1cf0682c7985b3eca6879337617097d8071bfae77ab4bab6928c47c783d77
-
SSDEEP
768:lDklTc40sBrUt9a+1sBCwfqTbOYEU2q+tymE:9FtwcwfqvOs9+YmE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1708 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1708 AcroRd32.exe 1708 AcroRd32.exe 1708 AcroRd32.exe 1708 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f611078b32a542d50bf0866592130008_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1708
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c6e0c0ebdaff4583495f3a27874327d6
SHA16a59a0b90d30e1dac0cd83624833ab923271e1e6
SHA256a94a1925d54b92b7c767418d8150c7c4d7c23cac379d597e30fd129437ba827e
SHA512dbdac8e761eafc27c69662714963bc7a74bec445592d39c5abb3bdd16083c05bb229235dbfa8cef942a24fab82d2479aedfb46acf6caf6b185b135c059b62f70