Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 14:20
Behavioral task
behavioral1
Sample
131aaaf4f51f6ed6481a6c68a7fa432f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
131aaaf4f51f6ed6481a6c68a7fa432f_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
131aaaf4f51f6ed6481a6c68a7fa432f_JaffaCakes118.pdf
-
Size
186KB
-
MD5
131aaaf4f51f6ed6481a6c68a7fa432f
-
SHA1
992f579d4b445d341bb8f667b1fc967b369c2636
-
SHA256
62b47bf892024fe9d9ba06fa7f7d153f88cca02c7034596ca03089493de2de28
-
SHA512
572bca1973ac871b8be3a93f9b55820ce3e7c316f80d5e26a4184cc5523750faf08233dde482e4c7d9865dfb7af0afed1280bd13334230add9a281e2037a1a53
-
SSDEEP
3072:v2irbxzGAFYDMxud7fKg3dXVmbOn5uo6KjnnQZWBPemDcESc6z3WcrUyzIP2Txg0:v2MKlWQ7Sg3d4bOJQZyDshdrbfZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2324 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2324 AcroRd32.exe 2324 AcroRd32.exe 2324 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\131aaaf4f51f6ed6481a6c68a7fa432f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2324
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD513c5a8aaa78a515b68dccebe7ee7ab7a
SHA15cd29ba76497bd219b0a3e4ae52654f7f799431f
SHA256b0b16a67885a78cb073c77307e215a3a21540595102c031ce021a8be2bc3316a
SHA512e98dcb066b94d8b100087fb4bb9008d9f1c56e49da57ed2bd08aeb01ac90996d7b17ce545529a59ea946afbbf31bffd05fb2679377158edf137bc5a05694a213