Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 23:44
Behavioral task
behavioral1
Sample
690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf
-
Size
39KB
-
MD5
690924b74cbb5f1621946a198b9dd1fc
-
SHA1
0ba80dade0dc5581975bdab0d71c44d62455b98e
-
SHA256
08bd91bf9d838eb9877e6e2985cf742fd62e58cde5a6165e305a7d147335584f
-
SHA512
6b2be2446c2454ee4b7098c12de082d835936c8fe5166086e69baa51922ef0a953414b6ce4132ead2b8045531b3c05c89d0e8eeae74f73be1fc923d2ef6580b4
-
SSDEEP
768:dpihQHuXJ7dQDQCaFFg2RJfbX11/3LnyALe/HCUAn2cy5E5/XuMZmwgCLWar8cK:HApXJBQDQCaFFg2RJfbX11/3LyAqCUjj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2296 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2296 AcroRd32.exe 2296 AcroRd32.exe 2296 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\690924b74cbb5f1621946a198b9dd1fc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50276e94c49178e1987e803e5658e52c3
SHA16a2920cdbcff60f6e36f43ac5bf33be39711637e
SHA2560b4d0e6405e076d8183c593fc0e9e1b0bc5211af2218dd8574d6df3a3272df7f
SHA512c89b4a5f66b70f77b4a67072408604f4b7dc80c09a1b4c4235bbae55e18acde36c275d8c6b95e345c58c1a28f1bdfec4af83e07c1eee24464f659b5f316ef402