Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:12
Behavioral task
behavioral1
Sample
69686ba3e2dcdaf594915d3b63a8da63_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
69686ba3e2dcdaf594915d3b63a8da63_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
69686ba3e2dcdaf594915d3b63a8da63_JaffaCakes118.pdf
-
Size
33KB
-
MD5
69686ba3e2dcdaf594915d3b63a8da63
-
SHA1
58f2b6f11a3a7af66ffa0777411fd627206021b3
-
SHA256
05ff21c41f5eefea99e6f5ef0aadb4897d01df2159a19272f5c60ab4611b2e5c
-
SHA512
d9cc597aa9271b045e49cbda391e1fcad740bd8cdedf530fdf8c656edad78944aae3510c056478858120c8e3c4b6c3b0b8255f23d99af28ba2c290609cd24bec
-
SSDEEP
768:ngGzpDlDGFqABwEBTLUiFuwRXgNQNypY03YgLlLcnN4P3Yd:gGFh/pY0ogLdcn+3Yd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1808 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1808 AcroRd32.exe 1808 AcroRd32.exe 1808 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69686ba3e2dcdaf594915d3b63a8da63_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58fa1e7cacc974c3e8201aa203fbec4b6
SHA112b15821813178c3d57c0f14f609b11f0cc37145
SHA2569ffcc6667a733d7c0eaa5296ea570dfb0cf7d0e751840aba19387e9cd37ef058
SHA512f0e27fefc16684d281474b3e81c37e36608c0aea5c92e63d4948c39a13af7d1d3220038edf1fda2f36468979c0be9251b21cf34adad221efa5a09106f8ac8e2d