Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 01:29
Behavioral task
behavioral1
Sample
320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf
-
Size
38KB
-
MD5
320a0ebe44bda96a6d5334c7a601f1da
-
SHA1
a5068438787c9a5792d5b13184c288d3ff07b2da
-
SHA256
cde4ac6ac03b4a2d97377988220182bc787c29fb1c6e477b37060b08aba28b30
-
SHA512
246a2568240209167e889cc7403262d81bbbdde5c95e747ada8bf42dd382c3d81b42b3240a5302101007e1019fea8cd0fdf79bbefca785c31ebc03604b636a02
-
SSDEEP
768:l2u3mtswYp8irFImCupDQTaVF3PFFxVvOXgQlQ9E5vXuMZmwgCLWarRJ:QV8KEFImCupDQTaVF3PFV4Q8XFZmGWSf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2952 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2952 AcroRd32.exe 2952 AcroRd32.exe 2952 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\320a0ebe44bda96a6d5334c7a601f1da_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2952
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e0466351406a9f9201afc931259028e0
SHA131bddca49c0549bd125152895d70ffc35999a8c3
SHA256307c5e2d4a7ca2b185cd4fc579925d429f83f89df815e7470f8b7b143687d609
SHA51214332b1268a6e1b2768c2a4bc6334913c2d125159926f1e5d265ce45cadcd363a03035ae31664f9ae6e07c4ceac4da97cbbdadf5eab64469e95262b704ae0741