Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 10:20
Behavioral task
behavioral1
Sample
008c8ba48c7c8ecab08faf545aaabd81_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
008c8ba48c7c8ecab08faf545aaabd81_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
008c8ba48c7c8ecab08faf545aaabd81_JaffaCakes118.pdf
-
Size
45KB
-
MD5
008c8ba48c7c8ecab08faf545aaabd81
-
SHA1
ebcfa2db689b0875eaea3b22e7eba58379d217b9
-
SHA256
534f411a7270f63ef937cc8c4b95ebed9b17bc8f07b86fa9a67190213849a7d4
-
SHA512
4f42659d90248a2c8d709d0c3cee0f7953054fd89bed3a19fef377fc4c504001ee0f61c9084933cc3e53cf34900e76352689d4959156f8bd282e0dcf6bbcae0e
-
SSDEEP
768:UX2QcZMS8PA1UU4RvjxuVmqGDkUoyp9rlarWm/1PfJ048YNiiVv+KM:UX23Z84OUivVuVmqsk3CArW8Pmr2VFM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2140 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2140 AcroRd32.exe 2140 AcroRd32.exe 2140 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\008c8ba48c7c8ecab08faf545aaabd81_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5e688c3a5491598f6e24566bc2f522eb0
SHA177122f614d1c04e5232a9d7d9bdfefb15a2edc09
SHA256aba921d0238163e9c0dec2d371f85ee81e04517b4fe8ceeda3dce0065732b4c2
SHA512e1a852448a2d2dc88424adb834324e7cb557519cab79156ddcefe52d250260294708061cb709726f256649fadfe302307df08e6b24c51f72a717473f3118ede9