Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 20:47
Behavioral task
behavioral1
Sample
68941b5f14174985eb8018e13a0d39bc_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
68941b5f14174985eb8018e13a0d39bc_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
68941b5f14174985eb8018e13a0d39bc_JaffaCakes118.pdf
-
Size
41KB
-
MD5
68941b5f14174985eb8018e13a0d39bc
-
SHA1
7e00ff9fe64dbd34d8310c21dd7a3e59d625fdea
-
SHA256
c02cf64d9d580af1f9b575d63113b5a0012ea016c9930e7ecf7f1902afbaa8e1
-
SHA512
1ad7c8303b36ea9084ffb9c1c717894949ad0ca0b5cc80422bfcda1b0fb8bc7779809d8fbfcd77632e29dd29a1fddfc6f5dc6bf415fea9c87aa7f774ddc8ea57
-
SSDEEP
768:BKgGzpDbqRIhvKJk0NWNOYtsmnN/vn1PL/PqezpWgfc5l:BXGFIavynC1PL/Pjzffc5l
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68941b5f14174985eb8018e13a0d39bc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD51bbd0bb27a2aaf17a2b1b9029e1b2e92
SHA1958cc4f8c9bbaf3955a17221e4737119c4c92f3e
SHA256cf9021530a9b2a42690cc18497090d7681bf2a2fae664e038714f4eec28fb765
SHA512925aa296f66c841a3a8bd7c05da691647ede4306330ae183a868d953bd91ac6605fbf42d206801a669403131e5579224dd7b13327ab03eb9ebe7f0251f661bd4