Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
21-04-2024 18:43
Behavioral task
behavioral1
Sample
ffec7cb47a4f97c9d9719cb27d17b683_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ffec7cb47a4f97c9d9719cb27d17b683_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ffec7cb47a4f97c9d9719cb27d17b683_JaffaCakes118.pdf
-
Size
34KB
-
MD5
ffec7cb47a4f97c9d9719cb27d17b683
-
SHA1
648ea311886542983eefa093f2cb09128fcb8500
-
SHA256
6047bd4c44241e966722ccf0860e7108d2561ac0d8573546d68be8fe1b6431cd
-
SHA512
564088829844e6e3c0c5e957a76e96278fd983e4b7038f55395a05a57d60ed32e268fdd967752d28a81030c5daba6256a95e4887ff850252abb97121136bf188
-
SSDEEP
768:UZfDKllOwaO6VisP3MmKaoorSUaD4HoqWP8UV1o1WU:ufujp4n8UrOkdWPK1WU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
AcroRd32.exepid process 2912 AcroRd32.exe 2912 AcroRd32.exe 2912 AcroRd32.exe 2912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffec7cb47a4f97c9d9719cb27d17b683_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5e196bb17c68405afa2dcd21fda1f4b97
SHA118726d27f2841cb3f61c1d7c48794c7352940a80
SHA2563821ca5d999f77b2fd5873852995997564e0c595a1a6cc45fd2b7be52fd97c39
SHA512fe398d8a7b90054476a8ac365683e0593db9e9e56ddfecadde79abc6a02a92b3441c24b0602f304f3d3d4f0319023d4aefd95844d1e26d0c2bcf72aa9ff4a9b8