Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 06:59
Behavioral task
behavioral1
Sample
003bd151343f180a4218a54b7898839d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
003bd151343f180a4218a54b7898839d_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
003bd151343f180a4218a54b7898839d_JaffaCakes118.pdf
-
Size
36KB
-
MD5
003bd151343f180a4218a54b7898839d
-
SHA1
a8a50da9f25ade3b3aebf14529dc41aeed684e9f
-
SHA256
6bf956cb7ab00d2cc99c4a65a9f744d76817ae2645a5ec393c004af1b1a7e0b3
-
SHA512
b3be206ecedc946d070195adfb14bb00a9bc00925f6cec487f8d5c73a0b1893145a81e15e8af629608b5ceaa98120cc774e43c024dfc33ffb3a3226c3bb2a4bc
-
SSDEEP
768:MXuMZmwgCLWarMFE5Hpxc+bS3jwdPL0bYtitmn8YTQpyoBWdGR+yYgv0z2QB57ff:MXFZmGWSM2jc+bejwdPL00titr9Ydm+P
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\003bd151343f180a4218a54b7898839d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD56ca1d333304866b6097d3a94b1aab34a
SHA11bb21d8c1942db1be8fca63afa33240efc06e3b5
SHA256a9f23cf4ca8e818ff03cb7b5fb563508857daff59e4fcbaa822d2e8582cac61e
SHA512bc2481b885f5a20a2e959f3a90196f5edefa32a49aeb0e47f0b52337b695dbeb779547b0cc191aa005ee570b70e322fcd0ed5da7d5ab2cd900b43066cd5cb9f5