Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:11
Behavioral task
behavioral1
Sample
6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf
-
Size
39KB
-
MD5
6919766d367a61f6b89bae00a4086381
-
SHA1
0af05932ff53f0b3805d85f5dfede845b825aa9c
-
SHA256
557477ca3816718d83a81b6e32bea0bb24f99e1ad766a620f531a232f38b2428
-
SHA512
0195643baf22ea946c4b93a873a3517de6bfe379c21fa0114d0ac007c051805b9efb06b2e8eff0cfee180943a9b1a33f535dce26fcdc8ae3724421412cb03315
-
SSDEEP
768:YgGzpDheXXaN4xzejrHQrB99pcuX8KPszNDD5biU/nWwI7GBdNcj:1GFteZ9pp7kzNX5bimWwI7GBrcj
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1212 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1212 AcroRd32.exe 1212 AcroRd32.exe 1212 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6919766d367a61f6b89bae00a4086381_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1212
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD573f774bc886121fb787c362f3692e0e2
SHA151c7ca14591575fe6270a1db6d5dc1c3b9edd6e2
SHA256dfd6b9689636d36fcf72d5a700ddf81589f54e6a429e36886f90f0f539e4c55d
SHA5121152826843552e774639324b2f0145c0491ca29b01cfc02ec11ce64d2740c2853542b784e96774c836a9bedc9539844ae3fee7102c5853980dc4f7d72a1d0244