Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08-05-2024 10:54
Behavioral task
behavioral1
Sample
24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf
-
Size
42KB
-
MD5
24852da66312f53d87caea9db0ad865d
-
SHA1
e75a179ca0bef7861d6b9432337736cc8c044635
-
SHA256
859de4b8df5d713094db17db22bba481f9ff9d428f6c05513946f88b3a3577eb
-
SHA512
556f99674d35ae76dc0b69478e5de0bf9b8729952ecef65f4b98e7c51561a9335f32400fa8ac917152d05a09629ed7399c0ca855d2933a3d29990e3ec9cd833f
-
SSDEEP
768:kgGzpD9p6KgU0blSwn297eb+05rmnkBzxxn1JeZ8Y88Sr0EbIVBRJNGKTI:RGFRptNatmMnrDY1n42BRJN5TI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1296 AcroRd32.exe 1296 AcroRd32.exe 1296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24852da66312f53d87caea9db0ad865d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b9ad217eb322a679dd6ef2ad0ee18f79
SHA1a50e101b2313d1caf9fd5befb05f7227c6b88591
SHA256ab59a17768d5a274108ad54356ae993b7a7c554d7e78f0b2056d4d76369ea86a
SHA51224744e29ddb1bb6276e3504a7bb517000c13bf017bbb6f74cec259510963e097bbcc47babaf668fcf241e62050d35bc7e2cfbd623d61e3f7f4f86867eac93353