Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08-05-2024 04:28
Behavioral task
behavioral1
Sample
23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf
-
Size
42KB
-
MD5
23328991a39c05221d5dbd1abc989665
-
SHA1
2a9c36ad472b32283b4a420064ea44e495db2b8c
-
SHA256
a07a5824547b339b0b687d0829fa3c94b9532144b733c6b06fba05864eae3993
-
SHA512
169c2d599a11e2416e453a3184959d858f8bb330781279f2ba159ae26be07d6cdc2ef2b4d2b4a93e746a4701c94610bc1ecb6c340d42bec2877671b40363b487
-
SSDEEP
768:42XuMZmwgCLWaruE5Hpxo6mTXROThZdhZVwrDWZS2gwX+B1uRFMzPD08u+ex7HDF:VXFZmGWSvjo6mTXROThZdhZVwrDth8+I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2988 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2988 AcroRd32.exe 2988 AcroRd32.exe 2988 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23328991a39c05221d5dbd1abc989665_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2988
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52c377f07394dcf086c99c812bb719335
SHA144556fd152976e33b4edca75eb76a3baceab1c59
SHA256ac2aafeae4ba6a374f01c7784d0f22175ecba5df417971c95d742ee6801ea981
SHA512d9a8c704bb023d9710c602153b213f4c79092d946cfd089502c86ced050c425d8a65986f7a235fd4e78c9a9d0de3dc0d0243b192be75f927251bf78f58cebbca