Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 02:31
Behavioral task
behavioral1
Sample
65b2c1862e83f5411325db69d6977520_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
65b2c1862e83f5411325db69d6977520_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
65b2c1862e83f5411325db69d6977520_JaffaCakes118.pdf
-
Size
41KB
-
MD5
65b2c1862e83f5411325db69d6977520
-
SHA1
ce8f801e743f379fe955e9acfbb8015b1bbbad13
-
SHA256
968c6b586bcbd6610d477b29838b1cddb55d681cb1e8651156d4000551f5a871
-
SHA512
3ebbe58b53866bd434d5a628af8d6911f30151b9c9899b59237b12e4a41d6a0dab2783da6deabc2b95cede91c2cc7401ab684180ab4f72610b71d4eb59980aa8
-
SSDEEP
768:MCob1sxImDaZGCN9Z+szj0UpIC9m7vuaA2U1jaVSVRil1hPwVsGymAuaDQsa0FaN:GbGWrGUdjHIC9mG2U1jsSVRil1hPwVsU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2944 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2944 AcroRd32.exe 2944 AcroRd32.exe 2944 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65b2c1862e83f5411325db69d6977520_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5a6b96401f31ddcddd39dff91e602e6b7
SHA196e1db783535134ee264f54c99075dc133b62644
SHA256992941c308f1ce3889801ecb34a0d7931f1bf94368e2959e804e049bea642671
SHA512fa1c1f1fba241b9de9d5264b75abcc12e5f8a86ce4f4e9543519081ee73502344c5054ff5e0efd036095865bd3dee7c361d5fcf96e833ac45938bc7752499b99