Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:16
Behavioral task
behavioral1
Sample
68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf
-
Size
48KB
-
MD5
68f809121f59cf5d45c932c6b49ccfa0
-
SHA1
cd8d83b257f4c59fc083d27e60570ead5c05c4c5
-
SHA256
4ea2c7384d740a8ff5a5026c11b7d11e24d92e2ec8ad9db7d87e5ed9440e8fd8
-
SHA512
d0109d4c979bfdad3375d09a776168305298f6d0d9b4a14a499b177f0dad965083ac955b0536f7470bd578684fd1523c3f6559b203f1bd6f4911adca6e488ef7
-
SSDEEP
1536:GGFwpUR7luZMQ9nKUhQtQv2XEqj4M/6AvKr:fFwp4UZMQVBhQtQkTj5/6nr
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2192 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f809121f59cf5d45c932c6b49ccfa0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD50ef570fa68c4d18b64fb81d49bfeb2d7
SHA13ee00970bee48172f6e5bf09b12baa8aa824c0f7
SHA256e5c616a98a0625ec8fc685261c6afe9713782f945923e971a4d279e22e114694
SHA51223ff1d532ba58a171c5886e3ad509066bc02214098ba0e417c10c34469aa207efb841135d94bac5c5fd4c81488737a8e5c91e943096766c91f4a6631dc22ebe1