Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 21:05
Behavioral task
behavioral1
Sample
68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf
-
Size
42KB
-
MD5
68a220754313027bc5aef1cc421d3752
-
SHA1
c9388dfb40625c41d58c55cd2aa52b448ab4b8e8
-
SHA256
6e4228951dad4bfb026ab7cf36ffdcb7169c98b074c281609960de2c3ff661f2
-
SHA512
3fe43b5c995c0701783f44ef0362a3b04cb13c53999f35cf64555a910e7f442ee8bfe0c6121261e9ae3c8a0cc0bb29a04b970f863e4fec0a324a8709d6f6464b
-
SSDEEP
768:B8gGzpDsMv9wYqTOicuqVoF7pDHaLbhq5vsfBGzou10qEXl:TGFAUJixLvsfocTqEXl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2984 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2984 AcroRd32.exe 2984 AcroRd32.exe 2984 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68a220754313027bc5aef1cc421d3752_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2984
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD580d95d775b8c5aa98caee866e666b2bd
SHA1d411c845dcf83ae524f305761f48492a6697de5f
SHA256ab8be8932336ffe9638bd9a1f4e9cdd8d46f2dd379dea5511c444137e3522737
SHA5126ecf0eb2b75e9c8f2a300b53a34e20a35f4ed87857588d5d2a1be52901cd4940025f06ba48a8452edf54e9027a4af13b9f4f3c1f9acfbb2231b5361b12e2fdf1