Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 17:20
Behavioral task
behavioral1
Sample
ffc7beb01e9eca1f5b88602c76edc326_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ffc7beb01e9eca1f5b88602c76edc326_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffc7beb01e9eca1f5b88602c76edc326_JaffaCakes118.pdf
-
Size
89KB
-
MD5
ffc7beb01e9eca1f5b88602c76edc326
-
SHA1
cfc8747f19833100b9ae640c6a98a591ce13c21a
-
SHA256
20460565b4dc80af4d0b7ba6702e22bfe68a4fe0e230f593163c29c2461944bb
-
SHA512
538008bc3930179cfa9c296ef61562c50c89567089327d0943354d0620e2c8c557d1ab88a68c589fb5ec5c1d1244bc354e0e7f40bb9d0a672b106edb1d08ae18
-
SSDEEP
1536:g5e4PrMkc9OrfqJlXaZiF2wIIq/4aUFDPp1MDWHpOvknC9wIOSWItXx8zNJ0lu:Se44QrfkhacyIy4TrivtWIOeaNJ3
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1632 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1632 AcroRd32.exe 1632 AcroRd32.exe 1632 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc7beb01e9eca1f5b88602c76edc326_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD522dbc2782465294ab16dcc7df0618d88
SHA1cc410bfdc993d9cb07fc94ed722ac9c7791174d6
SHA256eba16a3722c116db48a6f25f0817e75be5c6ea0edea0b7e66d68dbfab1696117
SHA51218ffd34816ce5422a0a213d4cacbdfeb5b381076500782a5fc7183ae061de43085c68df7a6516beb7b648c75f12a295c1a438911c29b879a32a8d7803ab6035d