Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:25
Behavioral task
behavioral1
Sample
69719b4f20563a562ab6212aaa74dd95_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
69719b4f20563a562ab6212aaa74dd95_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
69719b4f20563a562ab6212aaa74dd95_JaffaCakes118.pdf
-
Size
46KB
-
MD5
69719b4f20563a562ab6212aaa74dd95
-
SHA1
2f727c523587f960f0451fc0996f9bbfb9609662
-
SHA256
260722226311e021cf8df9b0fddbfcf4b2fff9ded9ca69faeb88939d964a5307
-
SHA512
9c18c87385cddc1f0ac231e3486dcf528c41a5124f3f438c10ccae16137e9a3e1b50712782dc8d6e77170747ff8888c4fa5a81434ce0e9d1335dcb8d2f9f7ee7
-
SSDEEP
768:jXuMZmwgCLWarYUE5HpP0GP3uKt48i+fvHU1GWwhuHdrR4s75c9rUunQK/DMaQMv:jXFZmGWSYN11P3uKt48i+fvHU1GWwhuU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 1848 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 1848 AcroRd32.exe 1848 AcroRd32.exe 1848 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69719b4f20563a562ab6212aaa74dd95_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5442299ea045c6a288c7fc2f278089a0c
SHA13a4e8205cb6782a8299b3302b874c0d4c7eb1ca8
SHA256a8c056cb08c1155002f5258fadc7e090cf559cae83eb422b6a4a5ea9fa984c3b
SHA51215b220bc3e9b8fd73a252eb95a0f64f1e80d3516a451d4f78a792eb85c506c42bdba1029083f634d4e80d94e50a7652526362a2979c2c9d874ae531e60cf3022