Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20-05-2024 02:21
Behavioral task
behavioral1
Sample
5cb10c30d9d41327530903034460b527_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5cb10c30d9d41327530903034460b527_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
5cb10c30d9d41327530903034460b527_JaffaCakes118.pdf
-
Size
8KB
-
MD5
5cb10c30d9d41327530903034460b527
-
SHA1
6bad4586c51762cb9d25030107cf3d21c5fc7bda
-
SHA256
61dbf6d30b049398284b06c3d88b3d0a96ffc8443e51b3e234de19502b5f5d75
-
SHA512
4e834cc29c69be7cf4f97c9e878fbb968b34aafab0abeca7f22db3028616c93cca890dbef90cec776ab42cdb9bf5f130185859cb83a90974976071d1111c2f4e
-
SSDEEP
192:+OIwLsjXmRPeIvRMCrPwgrMJGykxeiSpLXGP7:nGjXOJM30eGy6ypzC7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1656 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1656 AcroRd32.exe 1656 AcroRd32.exe 1656 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5cb10c30d9d41327530903034460b527_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5ce71dc23b5f99fb361869d4736681a81
SHA18844df586fade0c4cfa5b9ceb243e997298e813b
SHA256be5e8c5a30c47f8cdf3cc924365ad0715e83d9f4575af15feb662dd5ee8b3690
SHA512cc9ce21dc5259d14ef89b44e0146fd18a54a81e0057b95583ed01d891a6c3aeb8f94bf047650ccb63ff386f440af308c0d502a697cc4bc1085236299062c16cc