Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 11:39
Behavioral task
behavioral1
Sample
2eed12136f749267939c43e829a997af_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2eed12136f749267939c43e829a997af_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
2eed12136f749267939c43e829a997af_JaffaCakes118.pdf
-
Size
37KB
-
MD5
2eed12136f749267939c43e829a997af
-
SHA1
949df1f5e347846c2af4c4912b75f2f7dec73a02
-
SHA256
a5f2d1ae83284cbd7099bfc46e3aa1385071d58b2a201b3994060f1d6c71718c
-
SHA512
6942fd56e53a5125d8d008c038014b58a514c9bb67245147844bfd7b070ec02c7ca38ef2dffb07a1f8660ba1825e019f7df2641a19816f8e449795d001694af9
-
SSDEEP
768:9gGzpDgeInyShWtrAK2oJ9+TMjkqe/Z3/wQep7iFQwhtcWN/z:+GF8e3+Ioqe/ZPwNgFQ8tcaz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2216 AcroRd32.exe 2216 AcroRd32.exe 2216 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2eed12136f749267939c43e829a997af_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cfe2897d5134eab659bc048a30ef3432
SHA1b863c43ee179de8bf405245ce05cf72bea8ec353
SHA256f7562f08306b09b20889225a03f3213c249ed1c1e2d6dca3ccbb76571bb1ff1b
SHA512e71ab794828660710620df5020387e49b5f06564aafe77a6fb5b4c6509f95001283b3604a84a550160357b16942f4211568f7556ef0a65b77cce19184db876e3