Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23/05/2024, 10:46
Behavioral task
behavioral1
Sample
6aaee9d2e2185f9cca47e8dd130a35e1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6aaee9d2e2185f9cca47e8dd130a35e1_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6aaee9d2e2185f9cca47e8dd130a35e1_JaffaCakes118.pdf
-
Size
351KB
-
MD5
6aaee9d2e2185f9cca47e8dd130a35e1
-
SHA1
d038287cd8c9917b75eeea208e7ff6938622f921
-
SHA256
c8bc0f71e237666eb2cf102641bdcd9f08abbc75531e14b28b869e538e500fee
-
SHA512
f2911a49784ddc1018f424bbba55d60ae5274067582d7e634cff05d2272b167010835e6009652bea4c3aa10c7ddb130a2e6256ce46e67d6b7720679039452313
-
SSDEEP
6144:I+vruGmvOMs7FkBBEY0kjZrNhsja6gEfolWJkQ86KcXJgmv+DM:HK2nFk/EzktqDg1qkV6KcXJp9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3024 AcroRd32.exe 3024 AcroRd32.exe 3024 AcroRd32.exe 3024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6aaee9d2e2185f9cca47e8dd130a35e1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD538d9751d081d22f001ffac3cba900e0b
SHA13e7fae9fa7fa291d9e04912a61a01bacda9da600
SHA25671e9e9a4621233ab56d4e37714fee8d65ecd92d7fc7cd97e7705d2a94758985b
SHA5121ac2694b26ead275cfd40bdbbe947897772b6532de2188a7c8f44d85c834aad85f9933b89ff5f5890ca2ee3303d0d0806eab49b41be68efe8e573090ac8f7ca4