Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 15:53
Behavioral task
behavioral1
Sample
2ab842091e75c09115ce5b1a9dc24531_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ab842091e75c09115ce5b1a9dc24531_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
2ab842091e75c09115ce5b1a9dc24531_JaffaCakes118.pdf
-
Size
36KB
-
MD5
2ab842091e75c09115ce5b1a9dc24531
-
SHA1
6aa7ad355d820d4cc9aa372fae2cf13abb92704d
-
SHA256
d11c1e87b671175ca5fb47e3d1fe7830fd44e2c1ffd1023a8c9e9c361be2aac5
-
SHA512
8ed8276224f51c7ec83c1339b7ed955a8df999036e80523c7d8412b819f5678e0141fde089be1d3f0c3cb7b1ab145c6fa43d3239d56150e9ce676752033531c2
-
SSDEEP
768:VqR2OMkyJFyckDTft1RaV8V3iH1HP3VD1GimluZDQmad7HaAvvUTG7R8HE5RXuMu:4RFMjF3Oft1Rs8V3iH1HP3VD1GimluZn
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2ab842091e75c09115ce5b1a9dc24531_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5710471d59d48a7a3e6f49ca02e62bd54
SHA10d5a10dbafa9634b2566ae2835f56efb7a828b54
SHA2560464042a676847f0a88fe6859f8a18b2289b6e57ee22cfb544c35245b56e9af9
SHA512df58473a81e265332821a30197429e10fe4c914720b1bfd21100af338abb9b13cfca3aa7ac2ba15d38461ee2ca7291347d6e79878628ca8dd3171ad512993276