Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 09:45
Behavioral task
behavioral1
Sample
007faed7797ec215c7974c59040daada_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
007faed7797ec215c7974c59040daada_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
007faed7797ec215c7974c59040daada_JaffaCakes118.pdf
-
Size
225KB
-
MD5
007faed7797ec215c7974c59040daada
-
SHA1
b3d962ed758ce74d99036735f34e56471f5be297
-
SHA256
38dfbd742f0fe03c680fce66148e79d12781f0550f9a146402addd243dcd75cd
-
SHA512
6a03e2ba18aeaf6570c81bf8a5fb8a27ca16e7a7de98ed4cec008cfcb201ab1199de7dc3198e40dd2eeeba79496dcd5b295a9515317b19e7e35c9e3bf5d7682a
-
SSDEEP
6144:/tzUIWpULjxx8TL2yp4Dxj6sksP+5Qf+WX4RS73N:VzUIFLvyL2e4DVEk9X4RS73N
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\007faed7797ec215c7974c59040daada_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54ad1f2fdf6474d7fef4a55cc80806faf
SHA14f5ecd91e920b978a2d6b38c4a1f492e2f6de4aa
SHA2562023eafbd36882036c273059374b29c98656ab2f69d791f6f5d9ecb186724815
SHA512feae24e759749c7dd2d6003905d5b3145fd18f71709f08d5114fa31b71941ae20a99e02b23626cfee335c64111eee9d08ff86d7580016e299bd34221102e2653