Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 16:08
Behavioral task
behavioral1
Sample
137b4cf88786fcc28386d37171cafc47_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
137b4cf88786fcc28386d37171cafc47_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
137b4cf88786fcc28386d37171cafc47_JaffaCakes118.pdf
-
Size
44KB
-
MD5
137b4cf88786fcc28386d37171cafc47
-
SHA1
ddde210d175a53837893a924f943fc2ff7dc05cf
-
SHA256
1073bccce431966a186a108948e16c2fd9f576a66446533f84115e422eccdc44
-
SHA512
5a3a90e7b8be2a8815209b2621c808ffb6fbc79d3fc3edc42a3c784f435e570147375494b2a335abe528ee230d4d76b5a4012df4e2600750d589a08c9b3bfcb6
-
SSDEEP
768:7gGzpD9pIfnE9l2q2ocOLrCGOyze0OgTun+XRiCsLd1pQ6HiiXH/Pwbsd5oqV+PP:EGFxpI8KOKGze0pyd46Hx/4oToqV+P7r
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2176 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2176 AcroRd32.exe 2176 AcroRd32.exe 2176 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\137b4cf88786fcc28386d37171cafc47_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD57ae0d6080f085c48d47e8c0d05280ba7
SHA108aa1ceb473a7780cf12d1aa4af7e9a83c967394
SHA256b47f5b4b9e799310368eaeaa2c8957d22e535c80b82acff8e28293299329c822
SHA51292c7e4d7dde6ff029a84d435302f941367285bee7dd767fbfa33cc86413bb4153da3c316f72e88ab4401c22d358b05ce93f48286185e5f4ae29a8c6cb3421cc0