Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 18:17
Behavioral task
behavioral1
Sample
6bd6448bb169a2758d0073a846162cad_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6bd6448bb169a2758d0073a846162cad_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
6bd6448bb169a2758d0073a846162cad_JaffaCakes118.pdf
-
Size
45KB
-
MD5
6bd6448bb169a2758d0073a846162cad
-
SHA1
e9be51946ff028f3d1e7942874c79168736cd65e
-
SHA256
7c8ebbe1a51e2f36ac31710006cbf812bffa5aeff0f05975b43db94ea05f2ffb
-
SHA512
5f49af89f79eefb4c73ec74cb0be3f30d2779296b018b28dbd9f62aa5015383951f2dcda89e2aec0e8b6d495bef02ae2842df1258017696fc48bb18efda79178
-
SSDEEP
768:pgGzpDOpB9gt7hW0PX07uzkCQZmjsduzeWvpUH7bXQh79OtEMz/4vi5pEj25kXTD:KGFSpB6zkCQ5uzhaTzmEEj25keO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
AcroRd32.exepid process 2220 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
AcroRd32.exepid process 2220 AcroRd32.exe 2220 AcroRd32.exe 2220 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6bd6448bb169a2758d0073a846162cad_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEventsFilesize
3KB
MD5bd5520c2e2c357cf781e6eedb97f77e0
SHA19670f4eba898af62d06ae70d22b6aa860551791f
SHA256d20687278b8a7d2cfec6ad363ccdef6964559dfe45cfbbe4017874c34021d221
SHA5120fcfcc0b66ad49b3de73b7c6bcd0b1c9e7617c5940e7750b38626dcfd95bd080c8bd6748a820cba02001b252e261e62443fc6d051f6f6190157f2fdbf0b93b71