Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 15:06
Behavioral task
behavioral1
Sample
010a470726eed699176e393b801a5008_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
010a470726eed699176e393b801a5008_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
010a470726eed699176e393b801a5008_JaffaCakes118.pdf
-
Size
56KB
-
MD5
010a470726eed699176e393b801a5008
-
SHA1
4039845fc55bd9e7a9ffde7e034306b527e205e9
-
SHA256
0063252c30bbbfca7d995a9c93f74a4d4544d9622ba8b011d3d5f1a42266ed17
-
SHA512
014abaee3eb0dabb115a556e0784e7c1d1f48fe9530d26b1bdcd850813370ef776b052c592737b79a1d392a2d5705f66c6ccb8d72a36bd903e12934e6806b9dd
-
SSDEEP
1536:yGF3eAaHSgM6IYcvkHKfJvNDVjDFYENSaBT:rF3eA3mcvkHqvNDVppoa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2508 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2508 AcroRd32.exe 2508 AcroRd32.exe 2508 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\010a470726eed699176e393b801a5008_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2508
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5191709dc4e64605e4fa242b48c554f41
SHA11a8576c1f3a7b4216762294acdff25faa1b8d7e4
SHA256c390c80c13b34ca208291a85641f63bdc46b98e662364319c205185b041b1c68
SHA51275834dbd16fda6709cc55bced8fc924494be36a0457fa9b9e47938c05589441977d359393d8bacfc3a1942a68df137ecc1694c8d55bfdb84ac156f4ef5c5ed22