Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 09:13
Behavioral task
behavioral1
Sample
f9fb6f82795660558ec7f609bcd59999_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f9fb6f82795660558ec7f609bcd59999_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f9fb6f82795660558ec7f609bcd59999_JaffaCakes118.pdf
-
Size
75KB
-
MD5
f9fb6f82795660558ec7f609bcd59999
-
SHA1
408e400a0e6feee404f2a5fd890d461b94f4f0d8
-
SHA256
c6bd6a199a85b538917d5041085fb351332ae8991a565b2ee1efc021bf9f634e
-
SHA512
2e30d64fda60b47c726f951ba8eb3a7952e41b1c880c10df0480b48837b9275fd6f241d33aee2ccde20aa48a5fa4980450459c03a6b57dd97ddf7eaa5a8a0d21
-
SSDEEP
1536:/RUjRRfBvK3582dl83oZ6X+3z1yxjZGhe6Yx2PrKpBk0/iGqErDH:ejRtB+5fl83e6Xw1C6YKKpfVqE3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2416 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2416 AcroRd32.exe 2416 AcroRd32.exe 2416 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f9fb6f82795660558ec7f609bcd59999_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2416
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59912c207f1862422a604e812d81d3e04
SHA18c2c52ea3fed6878e3536af4427828af71a6ebc4
SHA256013edb5c89e5d0f6c3a0af7190f914c345cf1326d33638fdd76d1e6f29d1e380
SHA5122ab16380ea5f199a3e1f848b7d2ec51423e094611c22f1702de4208471cf7fc7eb1d6bf56bc7c77f95947ae86f8593abfeaa68ac5c7fef8c6cde7c3116d1066b