Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 01:30
Behavioral task
behavioral1
Sample
694b1be6d4439f1aff63fc1c21915421_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
694b1be6d4439f1aff63fc1c21915421_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
694b1be6d4439f1aff63fc1c21915421_JaffaCakes118.pdf
-
Size
80KB
-
MD5
694b1be6d4439f1aff63fc1c21915421
-
SHA1
b158828751f8a7f1161dd8b10f1e6b3acc6b7a01
-
SHA256
7303b6870978cce6773401dd58df374d61e355001348c51604f4539186cc1723
-
SHA512
10067a864a9715689b29c1f1baff320b619dc647063384b285c8a64e75566a6fd62dd1bc39a9a55d7fa1fb8014d9d4a1d819b4c4bb02673daf5557cb287b7c7a
-
SSDEEP
1536:7GFap+4jUDrNAFNFd7udgto82Nm68/rQzGpwgYuZovutLmm:aFapqJAFNFdKWCW/aGpYuZEutz
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2744 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2744 AcroRd32.exe 2744 AcroRd32.exe 2744 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\694b1be6d4439f1aff63fc1c21915421_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2744
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5268ecff858001593b9f5c00181d24cfc
SHA1e5efa8ba1f1a8ff728c0269a92a170b92f294e61
SHA256fbec4f6f8f844cb22107f835efc9a93d506ce88c28807194be50646ac3528509
SHA51204a1106d62fcccedde65ecd7a8d1e2bb43c84b37709e4fbe35193ce17fcd50605e6642bcd4de5e05fd150249bb64c1253ee1782a3c6cbc823f37cb7bea45bda4