Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 04:29
Behavioral task
behavioral1
Sample
fbedf75db7000c6f59c81da01ddaba27_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbedf75db7000c6f59c81da01ddaba27_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fbedf75db7000c6f59c81da01ddaba27_JaffaCakes118.pdf
-
Size
83KB
-
MD5
fbedf75db7000c6f59c81da01ddaba27
-
SHA1
8b96ae8c7b5c90cfa710829af584c69ebbc9f944
-
SHA256
fa4ce50c934a1504abef4bc87566bac15d9d302e2ca0df87fd041962f05d32b6
-
SHA512
f6d5bc5ae6c5efd0035495e0fc9c9f3f6d6a7aa5bcd072040f2b07fa9e9f275ad8bedab9d1e74b5b6832eb67c6376250e31070c369eacbe40b5be0bec57ba5e1
-
SSDEEP
1536:GGbhJHAtks+X9yrwPk7jLgKzFguegbLWSEErxhmWOpOwroqPu9LKv:hHAP+XwnvgKh9AEhbwrzW9G
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1288 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1288 AcroRd32.exe 1288 AcroRd32.exe 1288 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbedf75db7000c6f59c81da01ddaba27_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1288
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e79e4d809a6e39383c1f39b08f4e4a46
SHA161892a1e7eb675502818c572fe3d4145f02403b3
SHA256cce6c649ede2fe1df24f67c20d72e5550dca15dac3d89cb4a96ff7794ac5e23f
SHA512450cd22812e8126db28bfaad4270a65100425c2dd745b6df44c3686ead31a6c5e37a2ff1011f18217d4e6c68f1b9e05c879debeaab4b2f26ca4a87aad8e82b17