Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 21:06
Behavioral task
behavioral1
Sample
68a3294117a29db0f22764d37514c0ab_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68a3294117a29db0f22764d37514c0ab_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
68a3294117a29db0f22764d37514c0ab_JaffaCakes118.pdf
-
Size
42KB
-
MD5
68a3294117a29db0f22764d37514c0ab
-
SHA1
ebe3bb6f6e1b0725bf0664b161767c643808c850
-
SHA256
acb6d99558b08a34085891ee06a428ca8097efe589d9b026eece7743ad46e930
-
SHA512
e9faa3b6e27ee56b60e545e196e01d80e96dcb8b6bab6153a7a0eb27e79e36cb539ed0c34edec9a80d5ecbc3ab752c5345a23fa9da86e07191886bb974fbb5c7
-
SSDEEP
768:vgGzpDosNOpYX+uYtApFathqO5j9YLLjaOfXz75QYP2hr6wL55n3OPy8hb:YGFU1PBKaKb+hfLjn3OPy8hb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2512 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2512 AcroRd32.exe 2512 AcroRd32.exe 2512 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68a3294117a29db0f22764d37514c0ab_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2512
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53c892b053a7eaac677f4505f65446f31
SHA1efeee4bef4317d3160cb51173360c7ec59649214
SHA256c92e1c94f337d2885de0ba6ee306dacee834496807eaef8ea2540fe0dd927ba4
SHA51298d8faef528339229a0fdd287755b3285a15e819b044f884bb107b83153a7dac8bd9b445a8d5e27c889df81b4bcd06f37f1276dc0c64fbe6772940e02e536e90