Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
17-05-2024 07:42
Behavioral task
behavioral1
Sample
4f08885651a86f66976140bf7dea6201_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4f08885651a86f66976140bf7dea6201_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
4f08885651a86f66976140bf7dea6201_JaffaCakes118.pdf
-
Size
15KB
-
MD5
4f08885651a86f66976140bf7dea6201
-
SHA1
c7b152fa00c6e131279b231d22d45b4d46b1850b
-
SHA256
fd1676f1e0f3507aa1c51ebfeb6231a5429656bb07bea3003e6ced22399baa51
-
SHA512
90fa2b060a1a8b5ef33c43c2a1b4be761076df924444d4ab6d07af6e390c3992a3a388c3c344bc2330327500153d5e45f441d1ba62e71b22a4f1754ee1ec1f5e
-
SSDEEP
384:P+uMmZcyMqPd+MAOFixhyk+AhxsmB9yuAPCTO:P+ub/V+MTjxAhxt4uAaTO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2364 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2364 AcroRd32.exe 2364 AcroRd32.exe 2364 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4f08885651a86f66976140bf7dea6201_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD57ef94a1f2d26b84ff925944add99b668
SHA12675222e2c49803d9afe8bb5898d2fa5a0e04c95
SHA256d782e96d6c7b2ea126a109b97d7fe641bde9b55417f494e01229de6ccd9c5e50
SHA5124f08516d27f43a375355b415b7ea1f7e45dc9421d2cef2bf3e7cb44622e8b18496ea901284925807900bfa74120e3d957b740f0f0c0be2793a7e253983738148