Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 00:01
Behavioral task
behavioral1
Sample
6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf
-
Size
56KB
-
MD5
6547217c5e6e049452164023d6be4a36
-
SHA1
c312af426c36d17cb26688c3af6c0d63f1fe1eec
-
SHA256
6c5632c50d262e7614286e36e7aa21479229fe947c4861b1bd69321428facf32
-
SHA512
6ed8f68f3c1137601f559f155b8f3eb53463c5de14d267aad1c1aed81a233051590466b996ea91a2ec50b4d4c25965ed4adca222978bcbcc3d72b282e9aa3669
-
SSDEEP
1536:kGFSp4HEDoSkYgHXZsluWGMACTfKfd51IWHgFixUoWEghUi:xFSp40opb3iub1PNxUXX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2992 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2992 AcroRd32.exe 2992 AcroRd32.exe 2992 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6547217c5e6e049452164023d6be4a36_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59bfd1cde56814ba74474174a0a977e69
SHA1f5aee2abaf47b27d218c10eaefa484ef1027e18c
SHA256897a7d7d201325e5fc6d47dbf6b2aa0bae772109a027aa65cb6433c8e6ac71ba
SHA512633cb20448bf7288a16652f9fcbf72471e35cded96a12b3857790effe2c199932b06167df8ab5b6f8537fa16cba414d3849de0fe3a3e81134d708a5e4dcc5391