Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 04:23
Behavioral task
behavioral1
Sample
fbeb51b596aa12641694881178260536_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fbeb51b596aa12641694881178260536_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fbeb51b596aa12641694881178260536_JaffaCakes118.pdf
-
Size
71KB
-
MD5
fbeb51b596aa12641694881178260536
-
SHA1
54756b024c6c39bc064487512474c579481bd19b
-
SHA256
8cf81d631f25883d5c897df17ef009e4a5f111fb328c72c8a2e5627d6d80436d
-
SHA512
702eb94cc73a0a7c579bb73147c0f72f78c7c37fd6880d7865b69433a2a73572d84e7c1ed3ffbc17929e548cce915bf1c4170b8f35b2b08a9bb3e1ca8628e3bc
-
SSDEEP
1536:RVlOhaFctFM7iy3/HPrdydckctr1iShQLrViGSWypOlWWx8Aj0Pt4QQu0Soqid:qBLkPkdOtrEShQPVZlD8a0PtJQu0SK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2284 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2284 AcroRd32.exe 2284 AcroRd32.exe 2284 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbeb51b596aa12641694881178260536_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2284
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b998431a16b34e5e7ef75af840a0fd81
SHA1b481d9c7e793465691d54a21b9a69a389882a064
SHA2562e1c41d4aa4a4d3b27301db13778666ffeb08261f0b30a93b86b2f015dc03141
SHA5122fe08b2311353ac9dda26d223991ef5685df250a65426ad6f32c7b483020690e0d5960bf3ce721842ae6620f6ee3775665d6497f507fdab72e952acedb901d52