Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 17:03
Behavioral task
behavioral1
Sample
ffc132f48e97cfa8b5a8f14d8de3a7b5_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffc132f48e97cfa8b5a8f14d8de3a7b5_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffc132f48e97cfa8b5a8f14d8de3a7b5_JaffaCakes118.pdf
-
Size
70KB
-
MD5
ffc132f48e97cfa8b5a8f14d8de3a7b5
-
SHA1
e979c8cd62619f21b9a7b54d83523fe5cf1b744a
-
SHA256
44869b54e4b3772104974bf16c77adb8bda499c05961eb8f3b97326ff2b9665b
-
SHA512
5cbbe01b8b9cd5c4aae9841f3d6f22bb887b79f6ba6a035d8506ee45b50f6795cda413545f82855e2697d91c534450962ba32dc5a038c7e59b197992cf9357cc
-
SSDEEP
1536:3i4MUxw0bZFOhwVaefbgoChbJr8kS0cFewappfWS:jvZwWa4MT7S0cFewapl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2892 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2892 AcroRd32.exe 2892 AcroRd32.exe 2892 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc132f48e97cfa8b5a8f14d8de3a7b5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5f27af8d55b114e0b56b9492fb071502a
SHA1b68f2a275e3c4ed1aa513df4e6ffb6da3e7e2452
SHA256f5111f350a0f163353c26b7b479c2e8446fcb263bbd50a6ea65bc7a5ec0b90b4
SHA512be4c15d11c4f8ecbdb91117c7ba12b80610347503f8ec4450532d484ffcc604544eb8b4d486e9b8d9c8bc0c539f0508c151366283e10730d2652f223e786af1d