Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
24/05/2024, 06:59
Behavioral task
behavioral1
Sample
6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf
-
Size
32KB
-
MD5
6dac7c8252e271c905e8ddde1d4dfd0c
-
SHA1
6d54eac862ef978bcb7387253d65d257b94e7724
-
SHA256
8981ef62701e5517437ad13668f3fcd9d489ace584080ce2088af4ed3a6e8824
-
SHA512
0e2f0199b83309ab9a5be6593abd71eba009a5d92f76cad17a9dc7038966e6e0d3eb1ea25f6bf152592dd37d4d003e1ced98c85f255c376a1bb67bd261412a93
-
SSDEEP
768:V8Gpszgov7tHnQkylH1PJhEdVqOreTv/WljplCIcn7cxHE5RXuMZmwgCLWar+r:D5ovxHQkylH1PJhEdVqWeTv/WljplCIl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2428 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2428 AcroRd32.exe 2428 AcroRd32.exe 2428 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6dac7c8252e271c905e8ddde1d4dfd0c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2428
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e6748db9c9cc1bd78dd523e8424fcd4b
SHA181b4e4f5599b4be7fd43aed100fb99c7114baa87
SHA256986e6ea4654db2735ad3e61454ca02e0b7bb0788a90bb7305b048bfc63235220
SHA5125f3cab307c1a61c06375623c1dafd88bdf5fb6d831125bcf389375ddb8cd2c913aa0a21d906ad43ff048621bba1eb04ea1c8a96ab553ab4c383a28e0ab0e7ee8