Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 09:35
Behavioral task
behavioral1
Sample
410786ad1a26c1037d69d2d069a67588_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
410786ad1a26c1037d69d2d069a67588_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
410786ad1a26c1037d69d2d069a67588_JaffaCakes118.pdf
-
Size
41KB
-
MD5
410786ad1a26c1037d69d2d069a67588
-
SHA1
cba86e184d39498702937df863ac07370e95313c
-
SHA256
cd90705177fd76423cf3481d999c0188e0ef8f91e99312f5bbb836bceca364f3
-
SHA512
b8de580da871e2e6389a5de28d6af0b74fcf5f17ec120741e7d500166d592b6d1f0c25a5f98c941a3bb6a7c4489d0fed9480ed77cfc47dd9fb3b657e452be1c4
-
SSDEEP
768:HXuMZmwgCLWarNE5HpxixQzxRuTGdDaS/Rx6v11fTPAqZZQ20xboaM+PBLsq1T1F:HXFZmGWSujixQzxRuTGdDaS/R0v11TCX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2324 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2324 AcroRd32.exe 2324 AcroRd32.exe 2324 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\410786ad1a26c1037d69d2d069a67588_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2324
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54f6fe0569eab40732934a673a61c6c5f
SHA1119324eef83c7f6477bda710e996cfd53bf5c8af
SHA2566595d9550eab34ff4220d54ca55fe63ad083bec0638c535dd7020734bf8e6847
SHA5129f15fa47c3f0c8442b9fdd29af4e7fa62b04dbceb879c52a1c16a19f2e9feb08acfbc2547e1559204bcb32f76fab0584d1c38446b0eabfd6fe8307ede59a956a