Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 18:01
Behavioral task
behavioral1
Sample
60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf
-
Size
40KB
-
MD5
60726eedd252dbb09ce993365bed3deb
-
SHA1
49c7f6a62c4751fbffcd2a5421b656c7948b336f
-
SHA256
39629c4017577d5e15a523f9c409eeddec776ed5e1a554bd5dab3bb177a93511
-
SHA512
2419da99d1955825b4a73cb20a21a3ef7a2381fe19cdc32d01f7b2c5fc1db91fec685f34be6d01d13f944edb0f4881c495139b1fd571ee080471aa098f9726fa
-
SSDEEP
768:hTgGzpD3Oeo8cCkNiAQYfjtdXVwC0WmltrYiYt+O7WK9lm9GABiMJuzi:2GFCeZllxRu+OSK9lm9GAc3zi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1736 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1736 AcroRd32.exe 1736 AcroRd32.exe 1736 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60726eedd252dbb09ce993365bed3deb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1736
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d61cf6da738720f158e4549b5867ddf8
SHA124c059b69e8e9dc63872091d94ddc0ef88933505
SHA2564205cbbd13dd6960ce8742b9f68730d7ce6d2db6039a63f5a335743c413f3c05
SHA5123de274b5777f78af00bc18de94022ed2e561143804d13a6053505f9ab73f398af16174b74708577fa241556649da074a25a2a360502148cea5b4c401ecb6c602