Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:40
Behavioral task
behavioral1
Sample
ffeb3b0532005e363348f796f979dc3a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffeb3b0532005e363348f796f979dc3a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ffeb3b0532005e363348f796f979dc3a_JaffaCakes118.pdf
-
Size
85KB
-
MD5
ffeb3b0532005e363348f796f979dc3a
-
SHA1
b04b129ac70dc73847bcbb46fa53a327747e846f
-
SHA256
9bc4980962ad55b3f7dac9e61e9e85dc5bc00c1b9e9cdf2d0249d9556d99dc8f
-
SHA512
9f69d0cf1ca5709a368e7e357894b8de1978e59a5cf272d0ecaa836b70d7980cd4db3eecc5d46c7ec1ff54bbfdc355972b14cf8e7bffaacac38a277df7ebb0a5
-
SSDEEP
1536:VlbaRXjZEtMp4GKJ3S1qeUj5HgW0GMTJWXm4S/3s4Lr2WHCRBiui7+W6pOu20CfC:Xb4j4RD6q1j5HgW0GHXm4S/3dwqui776
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2012 AcroRd32.exe 2012 AcroRd32.exe 2012 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffeb3b0532005e363348f796f979dc3a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD567852e755a0488109087a60b1a75dfd5
SHA129717f832e1b456f6ef86434b84f8e91b9e64625
SHA2562f56fb6e6f278678074cbba5c86d0239d76d77169fd0f7db146d621ac0b6827c
SHA512f1c41d9bbe3c923fa00f432a964ac0641d506f579b423acd50b4b3c4674696ad5ecbff7cf03417b4662ccfd9d6757ce805aaa3add2bad057356b8405a9b30e9a