Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
17-05-2024 01:47
Behavioral task
behavioral1
Sample
4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf
-
Size
8KB
-
MD5
4ded5e76d420e4d07efb8e745fb48e60
-
SHA1
9b4826a8d297bddefff0f319579bb3646d4583f8
-
SHA256
26d80d413bfc687e137f3802d45ba9143c39f7bb1ba5e87fc1134bac65b75722
-
SHA512
6a232e4d33034af1ed53b67474edf5330363765dbd9016b01eeb461b3cd8679f45059af7ca552fbfc228a35286f1a9bbfe5f0a202a36710540bb7c3a047f3679
-
SSDEEP
192:oPpTzMV3+YOgR1VTxIrtEVBgwy38zDI083RvhUbRgjj0:oBTz+NIrtUBgwy38/3iRvhUG0
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1312 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1312 AcroRd32.exe 1312 AcroRd32.exe 1312 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ded5e76d420e4d07efb8e745fb48e60_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5e4c495e1b847db072eb48ec658609970
SHA131e9f961fb37b5d905a15c8b17fc4726f451a2bb
SHA256d968b95be3fe816fc8db5b1dfb67c14c725301024760e0f7608cca226b4e265e
SHA512d8bf15e90d0d502a2f298e5872fb9c0ffd5249a04b07eb8ebff4e98ca271bf9a1b4f91cd2efaf5a0fd07e9442862eccabe80e2163b5a74b52d4b2daac898bba1