Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 15:53
Behavioral task
behavioral1
Sample
f622d8a62462df7f0061ad0008a611fa_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f622d8a62462df7f0061ad0008a611fa_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f622d8a62462df7f0061ad0008a611fa_JaffaCakes118.pdf
-
Size
87KB
-
MD5
f622d8a62462df7f0061ad0008a611fa
-
SHA1
84a3da641e53ed3c72c02ce34646558943fa8927
-
SHA256
66e70e452dd2a1aac5069a71c9cc8019a2a55908f6428ba1d8806bf07f30653f
-
SHA512
60f3798b311662f040e002656c026712657d62727c820fcbba9bdce7e2c06723cfce33c4b1b308515f965e5bef2059eb18a61585b7b312d247fde5b825076f66
-
SSDEEP
1536:iIFCCNnE0kXGkEh4XqjzFfrlS8Oa16JSxHU28cn1tgWYpO2+WnyjYy0Z5cLSp:tF9NnE0oYh4XqPxpbOHSRUTqn32VTy09
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2992 AcroRd32.exe 2992 AcroRd32.exe 2992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f622d8a62462df7f0061ad0008a611fa_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59d09a24faec5d2a47c089e59f364b527
SHA161751b43a16117aa2705eed811edb98d2726cbb3
SHA256e24b374a40055ee5cd346771d895882340ed7c5278eda7539af669c1dd645a72
SHA51247e33d860ddbad6290a112f84c622814b0f244b14722d99520062914ced33797dbc6fe706319ee8ceca3078ef1895800f6dc333913f9bd1a88762ca244e8d112